Known Vulnerabilities for Communications Cloud Native Core Network Repository Function by Oracle
Listed below are 10 of the newest known vulnerabilities associated with "Communications Cloud Native Core Network Repository Function" by "Oracle".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
CVE | Shortened Description | Severity | Publish Date | Last Modified |
---|---|---|---|---|
CVE-2022-23308 | valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes. | 7.5 - HIGH | 2022-02-26 | 2022-11-02 |
CVE-2022-23219 | The deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies i... | 9.8 - CRITICAL | 2022-01-14 | 2022-11-08 |
CVE-2022-22965 | A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data bindin... | 9.8 - CRITICAL | 2022-04-01 | 2023-02-09 |
CVE-2022-22963 | In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possibl... | 9.8 - CRITICAL | 2022-04-01 | 2022-07-28 |
CVE-2022-22947 | In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the... | 10 - CRITICAL | 2022-03-03 | 2022-10-28 |
CVE-2022-22946 | In spring cloud gateway versions prior to 3.1.1+ , applications that are configured to enable HTTP2 and no key store or trust... | 5.5 - MEDIUM | 2022-03-04 | 2023-02-22 |
CVE-2021-22901 | curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when a TL... | 8.1 - HIGH | 2021-06-11 | 2022-05-13 |
CVE-2021-22898 | curl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option, known as `CURLOPT_TELNETOPT... | 3.1 - LOW | 2021-06-11 | 2022-08-30 |
CVE-2021-22897 | curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for CURLOPT_SS... | 5.3 - MEDIUM | 2021-06-11 | 2022-08-30 |
CVE-2021-22569 | An issue in protobuf-java allowed the interleaving of com.google.protobuf.UnknownFieldSet fields in such a way that would be ... | 5.5 - MEDIUM | 2022-01-10 | 2023-04-18 |