Product by Oracle

    Communications Cloud Native Core Service Communication Proxy

    26 known vulnerabilities in Communications Cloud Native Core Service Communication Proxy (Oracle), 1 of them actively exploited (CISA KEV).

    Key figures

    26

    Vulnerabilities

    1

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Communications Cloud Native Core Service Communication Proxy (Oracle)
    CriticalCVE-2022-22947

    VMware Spring Cloud Gateway Code Injection Vulnerability

    In CISA KEValso in 9 other products

    		10.0
    HighCVE-2021-22901

    Https://github.com/curl/curl: Use After Free

    also in 25 other products

    		8.1
    HighCVE-2021-36090

    Apache Commons Compress 1.0 to 1.20 denial of service vulnerability

    also in 34 other products

    		7.5
    HighCVE-2021-35516

    Apache Commons Compress 1.6 to 1.20 denial of service vulnerability

    also in 24 other products

    		7.5
    HighCVE-2021-35515

    Apache Commons Compress 1.6 to 1.20 denial of service vulnerability

    also in 26 other products

    		7.5
    HighCVE-2021-35517

    Apache Commons Compress 1.1 to 1.20 denial of service vulnerability

    also in 27 other products

    		7.5
    HighCVE-2020-11612

    Netty: security vulnerability

    also in 14 other products

    		7.5
    MediumCVE-2021-45105

    Apache Log4j2 does not always protect from infinite recursion in lookup evaluation

    also in 107 other products

    		5.9
    MediumCVE-2021-34429

    The Eclipse Foundation Eclipse Jetty: Incorrect Behavior Order: Authorization Before Parsing and Canonicalization

    also in 18 other products

    		5.3
    HighCVE-2020-36518

    FasterXML Jackson-databind: Denial of Service

    also in 37 other products

    		7.5
    MediumCVE-2021-33037

    Incorrect Transfer-Encoding handling with HTTP/1.0

    also in 23 other products

    		5.3
    HighCVE-2021-22946

    Https://github.com/curl/curl: Missing Cryptographic Step

    also in 29 other products

    		7.5
    MediumCVE-2020-8554

    Kubernetes man in the middle using LoadBalancer or ExternalIPs

    also in 4 other products

    		6.3
    MediumCVE-2020-13956

    Apache HttpClient: security vulnerability

    also in 23 other products

    		5.3
    HighCVE-2021-33560

    Libgcrypt: security vulnerability

    also in 7 other products

    		7.5
    MediumCVE-2021-22897

    Https://github.com/curl/curl: Business Logic Errors

    also in 21 other products

    		5.3
    MediumCVE-2021-22947

    Https://github.com/curl/curl: Cryptographic Issues

    also in 26 other products

    		5.9
    MediumCVE-2019-10219

    Hibernate Hibernate-validator: Cross-site Scripting

    also in 166 other products

    		6.5
    MediumCVE-2021-33880

    Websockets: security vulnerability

    also in 3 other products

    		5.9
    MediumCVE-2020-29582

    JetBrains Kotlin: security vulnerability

    also in 4 other products

    		5.3
    MediumCVE-2020-14340

    XNIO: Uncontrolled Resource Consumption

    also in 11 other products

    		5.9
    LowCVE-2021-22898

    Https://github.com/curl/curl: Exposure of Sensitive Information to an Unauthorized Actor

    also in 12 other products

    		3.1
    MediumCVE-2021-22096

    Spring Framework: Improper Output Neutralization for Logs

    also in 7 other products

    		4.3
    MediumCVE-2020-27618

    GNU glibc: Infinite Loop

    also in 13 other products

    		5.5
    MediumCVE-2021-22060

    Spring Framework: security vulnerability

    also in 2 other products

    		4.3

    All vulnerabilities in search

    News

    All products by Oracle