Oracle Communications Applications / VSP implementing webserver (Python) CVEs

VRT 391,192 CVEs tracked · 15,442 in RASP scope · data as of 16 hours ago

Description contains RASP scope Status Exploitation Severity

Reset

Overview 1 match · 0 in RASP scope · 0 protected · 0 KEV · 0 public PoC · 0 CISA SSVC · 0 EPSS ≥ 0.5 · 0 disputed

1match 0in RASP scope0.0% 0protected0.0% 0KEV0.0% 0public PoC0.0% 0CISA SSVC0.0% 0EPSS ≥ 0.50.0% 0disputed0.0%

Critical 0 0.0% High 1 100.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%

Protected by RASP 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% No fix identified 0 0.0% Mitigated by environment configuration 0 0.0% Queued for review 0 0.0% Not applicable 0 0.0% Out of RASP scope 1 100.0% Rejected 0 0.0%

blocked by ARMR today 0 0.0% not blocked 1 100.0% not established 0 0.0% unrecorded 0 0.0%

Exploited in the wild 0 0.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 1 100.0%

split by SeverityStatusProtectionExploit maturity peak 1 / month

Sep 19

1 match CSV JSON

CVE	Severity	Published▾	Status	Exploitation	Description
CVE-2019-16056	High	2019-09-06	Out of RASP scope	No public exploit	An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. The email module wrongly parses email addresses that contain multiple @ characters. An application that uses the email module and implements some kind of checks on the From/To headers of a message could be tricked into accepting an email address that should be denied. An attack may be the same as in CVE-2019-11340; however, this CVE applies to Python more generally.

CVE

Severity

Published▾

Status

Exploitation

Description

CVE-2019-16056

High

2019-09-06

Out of RASP scope

No public exploit

An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. The email module wrongly parses email addresses that contain multiple @ characters. An application that uses the email module and implements some kind of checks on the From/To headers of a message could be tricked into accepting an email address that should be denied. An attack may be the same as in CVE-2019-11340; however, this CVE applies to Python more generally.