Communications Interactive Session Recorder vulnerabilities

2 known vulnerabilities in Communications Interactive Session Recorder from Oracle. 1 is rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 6.1 Medium severity

  JQuery Cross-Site Scripting (XSS) Exploited

  CVE-2020-11023Apr 29, 2020JqueryEPSS 84.9%

  In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untr

• 9.8 Critical severity

  Apache Tomcat Remote Code Execution Exploited

  CVE-2016-8735Apr 6, 2017ApacheEPSS 90.3%

  Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if JmxRemoteLifecycleListener is used and an attacker can reach JMX ports. The issue exists because this list