Product by Oracle

    Communications Cloud Native Core Console

    23 known vulnerabilities in Communications Cloud Native Core Console (Oracle), 3 of them actively exploited (CISA KEV).

    Key figures

    23

    Vulnerabilities

    3

    Actively exploited (KEV)

    0

    Used by ransomware

    4

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Communications Cloud Native Core Console (Oracle)
    CriticalCVE-2022-22947

    VMware Spring Cloud Gateway Code Injection Vulnerability

    In CISA KEValso in 9 other products

    		10.0
    CriticalCVE-2022-22963

    VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability

    In CISA KEValso in 24 other products

    		9.8
    CriticalCVE-2022-22965

    Spring Framework JDK 9+ Remote Code Execution Vulnerability

    In CISA KEValso in 35 other products

    		9.8
    CriticalCVE-2022-23221

    H2 Database H2: Code Execution

    also in 2 other products

    		9.8
    HighCVE-2021-3712

    Read buffer overruns processing ASN.1 strings

    also in 33 other products

    		7.4
    HighCVE-2019-10086

    Apache Commons Beanutils: security vulnerability

    also in 58 other products

    		7.3
    HighCVE-2022-24407

    Cyrus IMAP Cyrus SASL: security vulnerability

    also in 7 other products

    		8.8
    MediumCVE-2021-45105

    Apache Log4j2 does not always protect from infinite recursion in lookup evaluation

    also in 107 other products

    		5.9
    HighCVE-2020-36518

    FasterXML Jackson-databind: Denial of Service

    also in 37 other products

    		7.5
    HighCVE-2021-22946

    Https://github.com/curl/curl: Missing Cryptographic Step

    also in 29 other products

    		7.5
    MediumCVE-2021-2471

    Oracle MySQL Connectors: security vulnerability

    also in 7 other products

    		5.9
    MediumCVE-2021-41973

    Apache MINA HTTP listener DOS

    also in 8 other products

    		6.5
    HighCVE-2020-25638

    Hibernate-core: SQL Injection

    also in 4 other products

    		7.4
    MediumCVE-2021-21409

    Possible request smuggling in HTTP/2 due missing validation of content-length

    also in 19 other products

    		5.9
    MediumCVE-2022-22946

    Spring Cloud Gateway: security vulnerability

    also in 5 other products

    		5.5
    MediumCVE-2021-30129

    DoS/OOM leak vulnerability in Apache Mina SSHD Server

    also in 9 other products

    		6.5
    MediumCVE-2021-22947

    Https://github.com/curl/curl: Cryptographic Issues

    also in 26 other products

    		5.9
    MediumCVE-2019-10219

    Hibernate Hibernate-validator: Cross-site Scripting

    also in 166 other products

    		6.5
    HighCVE-2021-22569

    Denial of Service of protobuf-java parsing procedure

    also in 5 other products

    		7.5
    MediumCVE-2020-14340

    XNIO: Uncontrolled Resource Consumption

    also in 11 other products

    		5.9
    MediumCVE-2021-20289

    Resteasy: Generation of Error Message Containing Sensitive Information

    also in 3 other products

    		5.3
    MediumCVE-2021-22096

    Spring Framework: Improper Output Neutralization for Logs

    also in 7 other products

    		4.3
    MediumCVE-2021-22060

    Spring Framework: security vulnerability

    also in 2 other products

    		4.3

    News

    All products by Oracle