Product by Oracle
Communications Cloud Native Core Automated Test Suite
50 known vulnerabilities in Communications Cloud Native Core Automated Test Suite (Oracle), 4 of them actively exploited (CISA KEV).
Key figures
50
Vulnerabilities
4
Actively exploited (KEV)
0
Used by ransomware
5
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2022-22963 | VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability In CISA KEValso in 24 other products | 9.8 | |
| Critical | CVE-2022-22965 | Spring Framework JDK 9+ Remote Code Execution Vulnerability In CISA KEValso in 35 other products | 9.8 | |
| Critical | CVE-2017-1000353 | Jenkins Remote Code Execution Vulnerability In CISA KEValso in 1 other product | 9.8 | |
| Critical | CVE-2021-39144 | XStream is vulnerable to a Remote Command Execution attack In CISA KEValso in 16 other products | 8.5 | |
| Critical | CVE-2021-29921 | Python Software Foundation CPython: security vulnerability | 9.8 | |
| High | CVE-2018-1999001 | Jenkins: security vulnerability | 8.8 | |
| High | CVE-2021-39141 | XStream is vulnerable to an Arbitrary Code Execution attack | 8.5 | |
| High | CVE-2021-39146 | XStream is vulnerable to an Arbitrary Code Execution attack | 8.5 | |
| High | CVE-2018-1999002 | Jenkins: security vulnerability | 7.5 | |
| High | CVE-2021-39152 | A Server-Side Forgery Request vulnerability in XStream via HashMap unmarshaling | 8.5 | |
| Medium | CVE-2021-22145 | Elasticsearch: Exposure of Sensitive Information to an Unauthorized Actor | 6.5 | |
| High | CVE-2021-36090 | Apache Commons Compress 1.0 to 1.20 denial of service vulnerability | 7.5 | |
| High | CVE-2021-35516 | Apache Commons Compress 1.6 to 1.20 denial of service vulnerability | 7.5 | |
| High | CVE-2021-35515 | Apache Commons Compress 1.6 to 1.20 denial of service vulnerability | 7.5 | |
| High | CVE-2021-39149 | XStream is vulnerable to an Arbitrary Code Execution attack | 8.5 | |
| High | CVE-2021-39148 | XStream is vulnerable to an Arbitrary Code Execution attack | 8.5 | |
| High | CVE-2021-39147 | XStream is vulnerable to an Arbitrary Code Execution attack | 8.5 | |
| High | CVE-2021-39151 | XStream is vulnerable to an Arbitrary Code Execution attack | 8.5 | |
| High | CVE-2021-39154 | XStream is vulnerable to an Arbitrary Code Execution attack | 8.5 | |
| High | CVE-2021-43859 | Denial of Service by injecting highly recursive collections or maps in XStream | 7.5 | |
| High | CVE-2021-39139 | XStream is vulnerable to an Arbitrary Code Execution attack | 8.5 | |
| High | CVE-2021-39153 | XStream is vulnerable to an Arbitrary Code Execution attack | 8.5 | |
| High | CVE-2021-39145 | XStream is vulnerable to an Arbitrary Code Execution attack | 8.5 | |
| Medium | CVE-2022-20615 | Jenkins Matrix Project Plugin: Cross-Site Scripting (XSS) | 5.4 | |
| High | CVE-2021-39150 | A Server-Side Forgery Request vulnerability in XStream via PriorityQueue unmarshaling | 8.5 |