| Package | Affected versions | Patched versions |
|---|---|---|
| aura application enablement services | = 7.0≥ 6.1, ≤ 6.3.3 | |
| aura application server 5300 | = 3.0 | |
| aura communication manager | = 7.0≥ 6.0, ≤ 6.3.117.0 | |
| aura communication manager messagint | = 7.0 | |
| aura conferencing | = 7.0= 7.2= 8.0 | |
| aura experience portal | ≥ 6.0, ≤ 7.1 | |
| aura messaging | = 6.3= 6.3.3 | |
| aura session manager | = 7.0= 7.0.1≥ 6.3, ≤ 6.3.18 | |
| aura system manager | ≥ 6.3, ≤ 6.3.18≥ 7.0, ≤ 7.0.1.3 | |
| aura utility services | ≥ 6.3, ≤ 6.3.14≥ 7.0, ≤ 7.0.1.2 | |
| breeze platform | ≥ 3.0, ≤ 3.2 | |
| call management system | = 17.0≥ 18.0.0.1, ≤ 18.0.0.2 | |
| ip office | = 10.0= 8.1= 9.1 | |
| iq | = 5.2.x | |
| meeting exchange | = 6.2 | |
| message networking | ≥ 5.2, ≤ 6.3 | |
| one-x client enablement services | = 6.2 | |
| proactive contact | ≥ 5.0, ≤ 5.1.2 | |
| nss | < 3.26 | 3.26 |
A Null pointer dereference vulnerability exists in Mozilla Network Security Services due to a missing NULL check in PK11_SignWithSymKey / ssl3_ComputeRecordMACConstantTime, which could let a remote malicious user cause a Denial of Service.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free