Oracle Communications Subscriber-Aware Load Balancer vulnerabilities

2 CVEs affecting Oracle Communications Subscriber-Aware Load Balancer, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-1971, published 2020-12-08.

More from Oracle.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-1971, published 2020-12-08. Medium severity, CVSS 5.9. EPSS: 7.1% chance of exploitation in the next 30 days. The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares…
• CVE-2020-8203, published 2020-07-15. High severity, CVSS 7.4. EPSS: 5.2% chance of exploitation in the next 30 days. Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20.