CVE Feed

    Dashboard / CVE / CVE-2017-10153

    CVE-2017-10153

    Vulnerability in the Oracle Communications WebRTC Session Controller component of Oracle Communications Applications (subcomponent: Security (Gson)). Supported versions that are affected are 7.0, 7.1 and 7.2. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise Oracle Communications WebRTC Session Controller. While the vulnerability is in Oracle Communications WebRTC Session Controller, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Communications WebRTC Session Controller. CVSS 3.0 Base Score 6.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H).

    Published:Oct 19, 2017
    Last Modified:Apr 20, 2025
    EPS:Oct 19, 2017
    EPSS Score:0.00507
    CVSS Score:6.3

    Affected Products

    Vendor
    Oracle
    Product
    Communications Webrtc Session Controller

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2021-45105 (CVSS 5.9) — Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolle…
    CVE-2020-11022 (CVSS 6.9) — In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing i…
    CVE-2019-10219 (CVSS 6.1) — A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize…
    CVE-2019-11358 (CVSS 6.1) — jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, .…
    CVE-2018-3246 (CVSS 7.5) — Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Ser…
    CVE-2018-8013 (CVSS 9.8) — In Apache Batik 1.x before 1.10, when deserializing subclass of `AbstractDocument`, the class takes a string f…
    CVE-2018-1000301 (CVSS 9.1) — curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in de…
    CVE-2018-1000180 (CVSS 7.5) — Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier have a flaw in the Low-level interface to…
    CVE-2018-1000120 (CVSS 9.8) — A buffer overflow exists in curl 7.12.3 to and including curl 7.58.0 in the FTP URL handling that allows an at…
    CVE-2018-1000121 (CVSS 7.5) — A NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code that allows an …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High