Communications Session Router

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2020-1971 MEDIUM PATCH This Month

The X.509 GeneralName type is a generic type for representing different types of names. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. This NULL Pointer Dereference vulnerability could allow attackers to crash the application by dereferencing a null pointer.

OpenSSL Denial Of Service Null Pointer Dereference Debian Linux Fedora +41

NVD VulDB

CVSS 3.1

5.9

EPSS

0.3%

CVE-2020-8203 LIB HIGH POC PATCH This Week

Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20. Rated high severity (CVSS 7.4), this vulnerability is remotely exploitable, no authentication required. Public exploit code available.

Denial Of Service Lodash Banking Corporate Lending Process Management Banking Credit Facilities Process Management Banking Extensibility Workbench +14

NVD GitHub

CVSS 3.1

7.4

EPSS

5.2%

CVE-2019-1559 MEDIUM PATCH This Month

If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required.

OpenSSL Information Disclosure Oracle Ubuntu Linux Debian Linux +79

NVD

CVSS 3.1

5.9

EPSS

17.1%

CVE-2020-1971

EPSS 0% CVSS 5.9

MEDIUM PATCH This Month

OpenSSL Denial Of Service Null Pointer Dereference +43

NVD VulDB

CVE-2020-8203 LIB

EPSS 5% CVSS 7.4

HIGH POC PATCH This Week

Denial Of Service Lodash Banking Corporate Lending Process Management +16

NVD GitHub

CVE-2019-1559

EPSS 17% CVSS 5.9

MEDIUM PATCH This Month

OpenSSL Information Disclosure Oracle +81

NVD