Communications Offline Mediation Controller

Vendor:

First CVE: Nov 8, 2019 · Active for 6 years

37
Total CVEs
More Total CVEs than 98% of tracked products
9.3
Avg CVEs / Year
Higher CVE frequency than 96% of tracked products
7.6
Avg CVSS
Higher Avg CVSS than 63% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Communications Offline Mediation Controller over time

Volume of CVEsAvg CVSS Base Score
First CVE
Nov 8, 2019
6 years ago
Most Recent CVE
Jan 18, 2022
1,652 days ago

CVE Severity & Scoring

Communications Offline Mediation Controller37 CVEs
All CVEs353,240 CVEs
LowMediumHighCritical
Attack Vector
Local1 (2.7%)
Network36 (97.3%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low14 (37.8%)
High23 (62.2%)
Unknown0 (0.0%)
User Interaction
None33 (89.2%)
Unknown0 (0.0%)
Required4 (10.8%)
Privileges Required
Low5 (13.5%)
High1 (2.7%)
None31 (83.8%)
Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (37 CVEs).

37 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2021-44832MEDIUM
Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a remote code execution (RCE) attack when a configuration uses
Dec 28, 20216.677NONO
CVE-2021-4104HIGH
JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. The attacker can provide TopicBindingName
Dec 14, 20217.570NONO
CVE-2022-23305CRITICAL
By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inserted are converters from PatternLayout. The message conv
Jan 18, 20229.868NONO
CVE-2022-23302HIGH
JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration or if the configuration refere
Jan 18, 20228.863NONO
CVE-2022-23307HIGH
CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exi
Jan 18, 20228.857NONO
CVE-2021-3177CRITICAL
Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-poi
Jan 19, 20219.842NONO
CVE-2021-23336MEDIUM
The package python/cpython from 0 and before 3.6.13, from 3.7.0 and before 3.7.10, from 3.8.0 and before 3.8.8, from 3.9.0 and before 3.9.2 are vulnerable to Web Cache Poisoning vi
Feb 15, 20215.938NONO
CVE-2020-36179HIGH
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapte
Jan 7, 20218.136NONO
CVE-2020-25649HIGH
A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allows vulnerability to XML external entity (XXE) attacks. The hi
Dec 3, 20207.534NONO
CVE-2020-36188HIGH
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDICo
Jan 6, 20218.130NONO
View all 37 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (37 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (37 CVEs).

Media Mentions

Signals from CVEs in this product scope (37 CVEs).

Top CNAs Publishing CVEs For Communications Offline Mediation Controller

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
12.0.0.5.058.372.0%00
12.0.0.3.0157.29.7%00
12.0.0.3177.88.2%00