Oracle Communications Element Manager 8.2.0/8.2.1/8.2.2 denial of service

A vulnerability, which was classified as critical, was found in Oracle Communications Element Manager 8.2.0/8.2.1/8.2.2 (Cloud Software). Affected is an unknown functionality. Upgrading eliminates this vulnerability. A possible mitigation has been published immediately after the disclosure of the vulnerability.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

Field

Commit Conf

Approve Conf

ID	Commited	User	Field	Change	Remarks	Moderated	Reason	C
10647178	11/22/2020	VulD...	cvss2_nvd_ai	P	nvd.nist.gov	11/22/2020	accepted	70
10647177	11/22/2020	VulD...	cvss2_nvd_ii	N	nvd.nist.gov	11/22/2020	accepted	70
10647176	11/22/2020	VulD...	cvss2_nvd_ci	N	nvd.nist.gov	11/22/2020	accepted	70
10647175	11/22/2020	VulD...	cvss2_nvd_au	N	nvd.nist.gov	11/22/2020	accepted	70
10647174	11/22/2020	VulD...	cvss2_nvd_ac	L	nvd.nist.gov	11/22/2020	accepted	70
10647173	11/22/2020	VulD...	cvss2_nvd_av	N	nvd.nist.gov	11/22/2020	accepted	70
10647172	11/22/2020	VulD...	cvss3_nvd_a	H	nvd.nist.gov	11/22/2020	accepted	70
10647171	11/22/2020	VulD...	cvss3_nvd_i	N	nvd.nist.gov	11/22/2020	accepted	70
10647170	11/22/2020	VulD...	cvss3_nvd_c	N	nvd.nist.gov	11/22/2020	accepted	70
10647169	11/22/2020	VulD...	cvss3_nvd_s	U	nvd.nist.gov	11/22/2020	accepted	70
10647168	11/22/2020	VulD...	cvss3_nvd_ui	N	nvd.nist.gov	11/22/2020	accepted	70
10647167	11/22/2020	VulD...	cvss3_nvd_pr	N	nvd.nist.gov	11/22/2020	accepted	70
10647166	11/22/2020	VulD...	cvss3_nvd_ac	L	nvd.nist.gov	11/22/2020	accepted	70
10647165	11/22/2020	VulD...	cvss3_nvd_av	N	nvd.nist.gov	11/22/2020	accepted	70
10647164	11/22/2020	VulD...	cve_nvd_summary	The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs. This can lead to a denial of service attack if an attacker can choose the file names inside of an archive created by Compress.	cve.mitre.org	11/22/2020	accepted	70
10647163	11/22/2020	VulD...	cve_assigned	1558994400	cve.mitre.org	11/22/2020	accepted	70
10647180	11/21/2020	VulD...	cvss3_nvd_basescore	7.5	nist.gov	11/21/2020	accepted	90
10647179	11/21/2020	VulD...	cvss2_nvd_basescore	5.0	nist.gov	11/21/2020	accepted	90
10538054	10/21/2020	VulD...	price_0day	$5k-$25k	see documentation	10/21/2020	accepted	90
10538053	10/21/2020	VulD...	cvss3_meta_tempscore	7.2	see documentation	10/21/2020	accepted	90