Oracle Communications Diameter Signaling Router Idih: vulnerabilities

3 CVEs affecting Oracle Communications Diameter Signaling Router Idih:, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-11022, published 2020-04-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-11022, published 2020-04-29. Medium severity, CVSS 6.1. EPSS: 99.2% chance of exploitation in the next 30 days. In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may…
CVE-2020-1954, published 2020-04-01. Medium severity, CVSS 5.3. EPSS: 6.1% chance of exploitation in the next 30 days. Apache CXF has the ability to integrate with JMX by registering an InstrumentationManager extension with the CXF bus. If the ‘createMBServerConnectorFactory‘ property of the default…
CVE-2019-12415, published 2019-10-23. Medium severity, CVSS 5.5. EPSS: 1% chance of exploitation in the next 30 days. In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an attacker to read files from the local…