Known Vulnerabilities for Communications Cloud Native Core Security Edge Protection Proxy by Oracle
Listed below are 10 of the newest known vulnerabilities associated with "Communications Cloud Native Core Security Edge Protection Proxy" by "Oracle".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2022-24407 json | In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE stat... | 8.8 - HIGH | 2022-02-24 | 2023-11-07 |
| CVE-2022-23219 json | The deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies i... | 9.8 - CRITICAL | 2022-01-14 | 2022-11-08 |
| CVE-2022-22965 json | A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data bindin... | 9.8 - CRITICAL | 2022-04-01 | 2023-02-09 |
| CVE-2022-22963 json | In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possibl... | 9.8 - CRITICAL | 2022-04-01 | 2023-07-13 |
| CVE-2022-22947 json | In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the... | 10 - CRITICAL | 2022-03-03 | 2023-07-24 |
| CVE-2022-22946 json | In spring cloud gateway versions prior to 3.1.1+ , applications that are configured to enable HTTP2 and no key store or trust... | 5.5 - MEDIUM | 2022-03-04 | 2023-02-22 |
| CVE-2021-45105 json | Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion fro... | 5.9 - MEDIUM | 2021-12-18 | 2022-10-06 |
| CVE-2021-43797 json | Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance pr... | 6.5 - MEDIUM | 2021-12-09 | 2023-02-24 |
| CVE-2021-43396 json | ** DISPUTED ** In iconvdata/iso-2022-jp-3.c in the GNU C Library (aka glibc) 2.34, remote attackers can force iconv() to emit... | 7.5 - HIGH | 2021-11-04 | 2023-11-07 |
| CVE-2021-38604 json | In librt in the GNU C Library (aka glibc) through 2.34, sysdeps/unix/sysv/linux/mq_notify.c mishandles certain NOTIFY_REMOVED... | 7.5 - HIGH | 2021-08-12 | 2023-11-07 |