Product by Oracle

Communications Cloud Native Core Network Function Cloud Native Environment

46 known vulnerabilities in Communications Cloud Native Core Network Function Cloud Native Environment (Oracle), 3 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Communications Cloud Native Core Network Function Cloud Native Environment (Oracle)

Critical	CVE-2022-22947	VMware Spring Cloud Gateway Code Injection Vulnerability In CISA KEValso in 9 other products	10.0	03.03.2022
Critical	CVE-2022-22963	VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability In CISA KEValso in 24 other products	9.8	01.04.2022
Critical	CVE-2022-22965	Spring Framework JDK 9+ Remote Code Execution Vulnerability In CISA KEValso in 35 other products	9.8	01.04.2022
Critical	CVE-2021-3177	Python Software Foundation CPython: Buffer Overflow also in 9 other products	9.8	19.01.2021
Critical	CVE-2019-15606	Node: Improper Input Validation also in 7 other products	9.8	07.02.2020
Critical	CVE-2020-27619	Python Software Foundation CPython: security vulnerability also in 2 other products	9.8	22.10.2020
High	CVE-2021-3518	Libxml2: Use After Free also in 17 other products	8.8	18.05.2021
High	CVE-2021-22901	Https://github.com/curl/curl: Use After Free also in 25 other products	8.1	11.06.2021
Critical	CVE-2020-14343	PyYAML: Improper Input Validation also in 1 other product	9.8	09.02.2021
High	CVE-2021-3517	Libxml2: Out-of-bounds Write also in 27 other products	8.6	19.05.2021
Critical	CVE-2020-1747	Red Hat PyYAML: Improper Input Validation also in 4 other products	9.8	24.03.2020
Critical	CVE-2022-23219	GNU glibc: Buffer Overflow also in 7 other products	9.8	14.01.2022
High	CVE-2021-34798	NULL pointer dereference in httpd core also in 18 other products	7.5	16.09.2021
High	CVE-2021-36160	mod_proxy_uwsgi out of bound read also in 14 other products	7.5	16.09.2021
Critical	CVE-2020-36242	Cryptography.io Cryptography: Buffer Overflow also in 2 other products	9.1	07.02.2021
High	CVE-2019-15604	Node: Improper Certificate Validation also in 10 other products	7.5	07.02.2020
Critical	CVE-2019-10746	Mixin-deep: security vulnerability also in 1 other product	9.8	23.08.2019
High	CVE-2022-24407	Cyrus IMAP Cyrus SASL: security vulnerability also in 7 other products	8.8	23.02.2022
Medium	CVE-2021-45105	Apache Log4j2 does not always protect from infinite recursion in lookup evaluation also in 107 other products	5.9	18.12.2021
High	CVE-2020-7595	XMLSoft libxml2: Infinite Loop also in 22 other products	7.5	21.01.2020
High	CVE-2022-23308	XMLSoft libxml2: Use-After-Free also in 34 other products	7.5	26.02.2022
High	CVE-2021-22946	Https://github.com/curl/curl: Missing Cryptographic Step also in 29 other products	7.5	29.09.2021
High	CVE-2020-7733	Regular Expression Denial of Service (ReDoS) also in 1 other product	7.5	16.09.2020
High	CVE-2021-38604	GNU glibc: NULL Pointer Dereference also in 7 other products	7.5	12.08.2021
Medium	CVE-2020-1971	EDIPARTYNAME NULL pointer dereference also in 43 other products	5.9	08.12.2020

All vulnerabilities in search

News

SSA-661247 V1.0: Apache Log4j Vulnerability (CVE-2021-44228, Log4Shell) - Impact to Siemens Productssiemens-productcert
SSA-479842 V1.0: Apache Log4j Vulnerabilities - Impact to Siemens Energy Sensformer (Platform, Basic and Advanced)siemens-productcert
SSA-501673 V1.0: Apache Log4j Denial of Service Vulnerability (CVE-2021-45105) - Impact to Siemens Productssiemens-productcert
SSA-254054 V1.0: Spring Framework Vulnerability (Spring4Shell or SpringShell, CVE-2022-22965) - Impact to Siemens Productssiemens-productcert
SSA-146325 V1.0: Multiple Vulnerabilities in RUGGEDCOM ROX before V2.16siemens-productcert

All products by Oracle

Key figures

Vulnerabilities

News