Product by Oracle

    Communications Cloud Native Core Security Edge Protection Proxy

    26 known vulnerabilities in Communications Cloud Native Core Security Edge Protection Proxy (Oracle), 3 of them actively exploited (CISA KEV).

    Key figures

    26

    Vulnerabilities

    3

    Actively exploited (KEV)

    0

    Used by ransomware

    6

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Communications Cloud Native Core Security Edge Protection Proxy (Oracle)
    CriticalCVE-2022-22947

    VMware Spring Cloud Gateway Code Injection Vulnerability

    In CISA KEValso in 9 other products

    		10.0
    CriticalCVE-2022-22963

    VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability

    In CISA KEValso in 24 other products

    		9.8
    CriticalCVE-2022-22965

    Spring Framework JDK 9+ Remote Code Execution Vulnerability

    In CISA KEValso in 35 other products

    		9.8
    CriticalCVE-2021-3711

    SM2 Decryption Buffer Overflow

    also in 31 other products

    		9.8
    CriticalCVE-2019-17195

    Oracle PeopleSoft Enterprise PeopleTools: Authentication Bypass

    also in 14 other products

    		9.8
    CriticalCVE-2022-23219

    GNU glibc: Buffer Overflow

    also in 7 other products

    		9.8
    HighCVE-2021-3712

    Read buffer overruns processing ASN.1 strings

    also in 33 other products

    		7.4
    HighCVE-2021-25122

    Apache Tomcat h2c request mix-up

    also in 13 other products

    		7.5
    HighCVE-2022-24407

    Cyrus IMAP Cyrus SASL: security vulnerability

    also in 7 other products

    		8.8
    MediumCVE-2021-45105

    Apache Log4j2 does not always protect from infinite recursion in lookup evaluation

    also in 107 other products

    		5.9
    HighCVE-2021-25329

    Incomplete fix for CVE-2020-9484

    also in 13 other products

    		7.0
    HighCVE-2021-37136

    The Netty project Netty: Uncontrolled Resource Consumption

    also in 20 other products

    		7.5
    MediumCVE-2021-34429

    The Eclipse Foundation Eclipse Jetty: Incorrect Behavior Order: Authorization Before Parsing and Canonicalization

    also in 18 other products

    		5.3
    HighCVE-2020-36518

    FasterXML Jackson-databind: Denial of Service

    also in 37 other products

    		7.5
    HighCVE-2021-22946

    Https://github.com/curl/curl: Missing Cryptographic Step

    also in 29 other products

    		7.5
    HighCVE-2021-3326

    GNU glibc: Denial of Service

    also in 10 other products

    		7.5
    HighCVE-2021-38604

    GNU glibc: NULL Pointer Dereference

    also in 7 other products

    		7.5
    MediumCVE-2021-2471

    Oracle MySQL Connectors: security vulnerability

    also in 7 other products

    		5.9
    HighCVE-2021-43396

    GNU glibc: security vulnerability

    also in 6 other products

    		7.5
    MediumCVE-2022-22946

    Spring Cloud Gateway: security vulnerability

    also in 5 other products

    		5.5
    MediumCVE-2021-43797

    Netty: HTTP Request/Response Smuggling

    also in 19 other products

    		6.5
    MediumCVE-2021-22947

    Https://github.com/curl/curl: Cryptographic Issues

    also in 26 other products

    		5.9
    MediumCVE-2019-10219

    Hibernate Hibernate-validator: Cross-site Scripting

    also in 166 other products

    		6.5
    MediumCVE-2021-33880

    Websockets: security vulnerability

    also in 3 other products

    		5.9
    MediumCVE-2020-14340

    XNIO: Uncontrolled Resource Consumption

    also in 11 other products

    		5.9

    All vulnerabilities in search

    News

    All products by Oracle