CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,437 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,437
Show in the list
Critical, last 7 days
355
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product oracle:communications_billing_and_revenue_management. Show all products

38 CVEs, showing 1 to 38
CVESeverityTitlePublished
CVE-2017-7525Critical 9.8A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by sending the malicious…
Assigned by redhat
Feb 6, 2018
CVE-2017-15095Critical 9.8A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending the maliciously craft…
Assigned by redhat
Feb 6, 2018
CVE-2018-7489Critical 9.8FasterXML jackson-databind before 2.7.9.3, 2.8.x before 2.8.11.1 and 2.9.x before 2.9.5 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization…
Assigned by mitre
Feb 26, 2018
CVE-2018-14721Critical 10.0FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to conduct server-side request forgery (SSRF) attacks by leveraging failure to block the axis2-jaxws class from polymorphic de…
Assigned by mitre
Jan 2, 2019
CVE-2018-14720Critical 9.8FasterXML jackson-databind 2.x before 2.9.7 might allow attackers to conduct external XML entity (XXE) attacks by leveraging failure to block unspecified JDK classes from polymorphic deserialization.
Assigned by mitre
Jan 2, 2019
CVE-2018-14718Critical 9.8FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic deserialization.
Assigned by mitre
Jan 2, 2019
CVE-2018-14719Critical 9.8FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the blaze-ds-opt and blaze-ds-core classes from polymorphic deseriali…
Assigned by mitre
Jan 2, 2019
CVE-2019-11358
Healthcare
Medium 6.1jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution.
Assigned by mitre
Apr 19, 2019
CVE-2019-10086
Healthcare
High 7.3In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Ja…
Assigned by apache
Aug 20, 2019
CVE-2019-16942Critical 9.8A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10.
Assigned by mitre
Oct 1, 2019
CVE-2019-16943Critical 9.8A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10.Oct 1, 2019
CVE-2019-17531Critical 9.8A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10.
Assigned by mitre
Oct 12, 2019
CVE-2019-10219
Healthcare
Medium 6.5A vulnerability was found in Hibernate-Validator.
Assigned by redhat
Nov 8, 2019
CVE-2019-20330Critical 9.8FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking.
Assigned by mitre
Jan 3, 2020
CVE-2020-11022
Healthcare
Medium 6.9jQuery has a potential XSS vulnerability
Assigned by GitHub_M
Apr 29, 2020
CVE-2020-10543High 8.2Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow.
Assigned by mitre
Jun 5, 2020
CVE-2020-10878High 8.6Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation.
Assigned by mitre
Jun 5, 2020
CVE-2020-12723High 7.5regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls.
Assigned by mitre
Jun 5, 2020
CVE-2020-25649High 7.5A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly.
Assigned by redhat
Dec 3, 2020
CVE-2020-8284Low 3.7A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about ser…
Assigned by hackerone
Dec 14, 2020
CVE-2020-8285High 7.5curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.
Assigned by hackerone
Dec 14, 2020
CVE-2020-8286High 7.5curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.
Assigned by hackerone
Dec 14, 2020
CVE-2020-36189High 8.1FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSo…
Assigned by mitre
Jan 6, 2021
CVE-2020-36188High 8.1FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource.
Assigned by mitre
Jan 6, 2021
CVE-2020-36187High 8.1FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource.
Assigned by mitre
Jan 6, 2021
CVE-2020-36186High 8.1FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource.
Assigned by mitre
Jan 6, 2021
CVE-2020-36185High 8.1FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource.
Assigned by mitre
Jan 6, 2021
CVE-2020-36183High 8.1FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool.
Assigned by mitre
Jan 6, 2021
CVE-2021-22876Medium 5.3curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information to an Unauthorized Actor" by leaking credentials in the HTTP Referer: header.
Assigned by hackerone
Apr 1, 2021
CVE-2021-22890Medium 4.3curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a connection due to bad handling of TLS 1.3 session tickets.
Assigned by hackerone
Apr 1, 2021
CVE-2021-35515
Healthcare
High 7.5Apache Commons Compress 1.6 to 1.20 denial of service vulnerability
Assigned by apache
Jul 13, 2021
CVE-2021-35516
Healthcare
High 7.5Apache Commons Compress 1.6 to 1.20 denial of service vulnerability
Assigned by apache
Jul 13, 2021
CVE-2021-35517
Healthcare
High 7.5Apache Commons Compress 1.1 to 1.20 denial of service vulnerability
Assigned by apache
Jul 13, 2021
CVE-2021-36090
Healthcare
High 7.5Apache Commons Compress 1.0 to 1.20 denial of service vulnerability
Assigned by apache
Jul 13, 2021
CVE-2021-2351
Healthcare
High 8.3Vulnerability in the Advanced Networking Option component of Oracle Database Server.
Assigned by oracle
Jul 20, 2021
CVE-2021-45105
Healthcare
Medium 5.9Apache Log4j2 does not always protect from infinite recursion in lookup evaluation
Assigned by apache
Dec 18, 2021
CVE-2026-61091High 7.8Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server).Jul 21, 2026
CVE-2026-61126High 7.8Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform).Jul 21, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.