Known vulnerabilities in Integrated Diameter Intelligence Hub (IDIH)

Known vulnerabilities in Integrated Diameter Intelligence Hub (IDIH)

Vendor: Oracle

Software: Integrated Diameter Intelligence Hub (IDIH)

Software CPE: cpe:2.3:a:oracle:idih:*:*:*:*:*:comms_diameter_signaling_router:*:*

Website: https://www.oracle.com

Total vulnerabilities: 12

Public exploits: 4

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (12)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU29128 - Deserialization of Untrusted Data CVE-2020-14195	CWE-502	High	Available	No	-	18.06.2020	SB2020061806 SB2020070320 SB2020102703 and 24 more
#VU28238 - Exposed Dangerous Method or Function CVE-2020-10683	CWE-749	Medium	No	No	-	26.05.2020	SB2020050106 SB2020052616 SB2020071632 and 43 more
#VU27954 - Deserialization of Untrusted Data CVE-2020-11973	CWE-502	High	No	No	-	17.05.2020	SB2020051702 SB2020102703 SB2020102927 and 1 more
#VU27953 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-1941	CWE-79	Low	No	No	-	17.05.2020	SB2020051701 SB2020071609 SB2020071610 and 5 more
#VU27924 - Incorrect Default Permissions CVE-2020-1945	CWE-276	Low	No	No	-	15.05.2020	SB2020051501 SB2020052114 SB2020060205 and 48 more
#VU27264 - Improper input validation CVE-2020-5398	CWE-20	Medium	Available	No	-	23.04.2020	SB2020042353 SB2020071609 SB2020071610 and 21 more
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-11022	CWE-79	Low	Available	No	-	21.04.2020	SB2020042126 SB2020052033 SB2020052103 and 181 more
#VU26530 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2020-1954	CWE-300	Low	No	No	-	02.04.2020	SB2020040206 SB2020102703 SB2020102832 and 8 more
#VU25048 - Improper input validation CVE-2020-2555	CWE-20	High	Available	Exploited	-	07.02.2020	SB2020011477 SB2020102703 SB2020102939 and 4 more
#VU22875 - Deserialization of Untrusted Data CVE-2019-10173	CWE-502	High	No	No	-	20.11.2019	SB2019072308 SB2019112016 SB2019121922 and 11 more
#VU22545 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2019-12415	CWE-611	High	No	No	-	06.11.2019	SB2019110635 SB2020012308 SB2020012309 and 42 more
#VU22272 - Missing release of memory after effective lifetime CVE-2019-17359	CWE-401	Medium	No	No	-	24.10.2019	SB2019102418 SB2020011478 SB2020042338 and 14 more