Communications Diameter Signaling Router vulnerabilities

2 known vulnerabilities in Communications Diameter Signaling Router from Oracle. 2 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Oracle Multiple Products Remote Code Execution Exploited

  CVE-2020-2555Jan 15, 2020OracleEPSS 97.1%

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation). Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticat

• 9.8 Critical severity

  PHPUnit Command Injection Exploited

  CVE-2017-9841Jun 27, 2017Phpunit ProjectEPSS 100%

  Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "<?php " substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., ext