Known Vulnerabilities for Communications Cloud Native Core Unified Data Repository by Oracle
Listed below are 10 of the newest known vulnerabilities associated with "Communications Cloud Native Core Unified Data Repository" by "Oracle".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2022-25845 json | The package com.alibaba:fastjson before 1.2.83 are vulnerable to Deserialization of Untrusted Data by bypassing the default a... | 9.8 - CRITICAL | 2022-06-10 | 2023-02-23 |
| CVE-2022-23308 json | valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes. | 7.5 - HIGH | 2022-02-26 | 2023-11-07 |
| CVE-2022-23219 json | The deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies i... | 9.8 - CRITICAL | 2022-01-14 | 2022-11-08 |
| CVE-2022-23218 json | The deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copie... | 9.8 - CRITICAL | 2022-01-14 | 2022-11-08 |
| CVE-2022-22965 json | A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data bindin... | 9.8 - CRITICAL | 2022-04-01 | 2023-02-09 |
| CVE-2022-22963 json | In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possibl... | 9.8 - CRITICAL | 2022-04-01 | 2023-07-13 |
| CVE-2021-45105 json | Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion fro... | 5.9 - MEDIUM | 2021-12-18 | 2022-10-06 |
| CVE-2021-43797 json | Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance pr... | 6.5 - MEDIUM | 2021-12-09 | 2023-02-24 |
| CVE-2021-43396 json | ** DISPUTED ** In iconvdata/iso-2022-jp-3.c in the GNU C Library (aka glibc) 2.34, remote attackers can force iconv() to emit... | 7.5 - HIGH | 2021-11-04 | 2023-11-07 |
| CVE-2021-38604 json | In librt in the GNU C Library (aka glibc) through 2.34, sysdeps/unix/sysv/linux/mq_notify.c mishandles certain NOTIFY_REMOVED... | 7.5 - HIGH | 2021-08-12 | 2023-11-07 |