Known vulnerabilities in Integrated Diameter Intelligence Hub (IDIH)

Known vulnerabilities in Integrated Diameter Intelligence Hub (IDIH)

Vendor: Oracle

Software: Integrated Diameter Intelligence Hub (IDIH)

Software CPE: cpe:2.3:a:oracle:idih:*:*:*:*:*:comms_diameter_signaling_router:*:*

Website: https://www.oracle.com

Total vulnerabilities: 12

Public exploits: 4

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (12)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU29128 - Deserialization of Untrusted Data CVE-2020-14195	CWE-502	High	Available	No	-	18.06.2020	-
#VU28238 - Exposed Dangerous Method or Function CVE-2020-10683	CWE-749	Medium	No	No	-	26.05.2020	-
#VU27954 - Deserialization of Untrusted Data CVE-2020-11973	CWE-502	High	No	No	-	17.05.2020	-
#VU27953 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-1941	CWE-79	Low	No	No	-	17.05.2020	-
#VU27924 - Incorrect Default Permissions CVE-2020-1945	CWE-276	Low	No	No	-	15.05.2020	-
#VU27264 - Improper input validation CVE-2020-5398	CWE-20	Medium	Available	No	-	23.04.2020	-
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-11022	CWE-79	Low	Available	No	-	21.04.2020	-
#VU26530 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2020-1954	CWE-300	Low	No	No	-	02.04.2020	-
#VU25048 - Improper input validation CVE-2020-2555	CWE-20	High	Available	Exploited	-	07.02.2020	-
#VU22875 - Deserialization of Untrusted Data CVE-2019-10173	CWE-502	High	No	No	-	20.11.2019	-
#VU22545 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2019-12415	CWE-611	High	No	No	-	06.11.2019	-
#VU22272 - Missing release of memory after effective lifetime CVE-2019-17359	CWE-401	Medium	No	No	-	24.10.2019	-