# Oracle Communications Diameter Signaling Router


- [CVE-2020-2555](https://insights.sbomify.com/CVE-2020-2555/): Oracle Multiple Products Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2017-9841](https://insights.sbomify.com/CVE-2017-9841/): PHPUnit Command Injection (critical 9.8, exploited in the wild)
- [CVE-2021-21783](https://insights.sbomify.com/CVE-2021-21783/): Integer overflow in Genivia (critical 9.8)
- [CVE-2020-11998](https://insights.sbomify.com/CVE-2020-11998/): Remote code execution in Apache ActiveMQ (critical 9.8)
- [CVE-2020-11972](https://insights.sbomify.com/CVE-2020-11972/): Deserialization of Untrusted Data in Apache Camel RabbitMQ (critical 9.8)
- [CVE-2020-11973](https://insights.sbomify.com/CVE-2020-11973/): Apache Camel Netty enables Java deserialization by default (critical 9.8)
- [CVE-2020-10683](https://insights.sbomify.com/CVE-2020-10683/): dom4j allows External Entities by default which might enable XXE attacks (critical 9.8)
- [CVE-2020-9546](https://insights.sbomify.com/CVE-2020-9546/): jackson-databind mishandles the interaction between serialization gadgets and typing (critical 9.8)
- [CVE-2020-9548](https://insights.sbomify.com/CVE-2020-9548/): jackson-databind mishandles the interaction between serialization gadgets and typing (critical 9.8)
- [CVE-2019-2904](https://insights.sbomify.com/CVE-2019-2904/): Auth bypass in Enterprise Repository (critical 9.8)
- [CVE-2019-14379](https://insights.sbomify.com/CVE-2019-14379/): Deserialization of untrusted data in FasterXML jackson-databind (critical 9.8)
- [CVE-2019-2729](https://insights.sbomify.com/CVE-2019-2729/): Auth bypass in WebLogic Server (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/products/oracle/communications-diameter-signaling-router/