Skip to contentOracle Communications Cloud Native Core Automated Test Suite vulnerabilities
- vmware spring cloud function, vmware tanzu spring cloud, oracle banking branch +26 more +28 moreSpring Cloud Function Code Injection with a specially crafted SpEL as a routing expressionCVE-2022-22963In KEVPublic exploitFix availableEPSS 99.9%9.8 Critical
- vmware spring framework, cisco cx cloud agent, oracle commerce platform +35 more +37 moreRemote Code Execution in Spring FrameworkCVE-2022-22965In KEVPublic exploitFix availableEPSS 99.6%9.8 Critical
- x-stream xstream, debian linux, fedoraproject fedora +8 more +10 moreDenial of Service by injecting highly recursive collections or maps in XStreamCVE-2021-43859Fix available7.5 High
- jenkins matrix project, jenkins project matrix project plugin, oracle communications cloud native core automated test suite +2 moreStored XSS vulnerability in Matrix Project PluginCVE-2022-20615Fix availableEPSS 81.8%5.4 Medium
- jenkins, oracle communications cloud native core automated test suite +1 moreCross-Site Request Forgery in JenkinsCVE-2022-20612Fix available4.3 Medium
- jenkins mailer, jenkins project mailer plugin, oracle communications cloud native core automated test suite +2 moreIncorrect Permission Assignment for Critical Resource in Jenkins Mailer PluginCVE-2022-20614Fix available4.3 Medium
- jenkins mailer, jenkins project mailer plugin, oracle communications cloud native core automated test suite +2 moreCross-Site Request Forgery in Jenkins Mailer PluginCVE-2022-20613Fix available4.3 Medium
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreA Server-Side Forgery Request vulnerability in XStream via PriorityQueue unmarshalingCVE-2021-39150Fix available8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreA Server-Side Forgery Request vulnerability in XStream via HashMap unmarshalingCVE-2021-39152Fix availableEPSS 11.4%8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream can cause a Denial of ServiceCVE-2021-39140Fix available6.5 Medium
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39149Fix available8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39148Fix available8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39147Fix available8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39146Fix availableEPSS 14.3%8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39145Fix available8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39141Public exploitFix availableEPSS 16.1%8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +10 more +12 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39153Fix available8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39151Fix available8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39139Fix available8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39154Fix available8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to a Remote Command Execution attackCVE-2021-39144In KEVPublic exploitFix availableEPSS 98.1%8.5 High
- elastic elasticsearch, oracle communications cloud native core automated test suite +1 moreDenial of Service in ElasticsearchCVE-2021-22144Fix available6.5 Medium
- elastic elasticsearch, oracle communications cloud native core automated test suite +1 moreGeneration of Error Message Containing Sensitive Information in ElasticsearchCVE-2021-22145Public exploitFix availableEPSS 76.2%6.5 Medium
- apache ant, oracle agile engineering data management, agile product lifecycle management +33 more +35 moreApache Ant ZIP, and ZIP based, archive denial of service vulerabilityCVE-2021-36374Fix available5.5 Medium
- apache ant, oracle agile product lifecycle management, banking trade finance +29 more +31 moreApache Ant TAR archive denial of service vulnerabilityCVE-2021-36373Fix available5.5 Medium
- apache commons compress, netapp active iq unified manager, oncommand insight +31 more +33 moreApache Commons Compress 1.0 to 1.20 denial of service vulnerabilityCVE-2021-36090Fix availableEPSS 12.9%7.5 High
- apache commons compress, netapp active iq unified manager, oncommand insight +21 more +23 moreApache Commons Compress 1.6 to 1.20 denial of service vulnerabilityCVE-2021-35516Fix availableEPSS 12.4%7.5 High
- apache commons compress, netapp active iq unified manager, oncommand insight +23 more +25 moreApache Commons Compress 1.6 to 1.20 denial of service vulnerabilityCVE-2021-35515Fix availableEPSS 11.6%7.5 High
- python, oracle communications cloud native core automated test suite, communications cloud native core binding support function +3 more +5 moreImproper input validation of octal strings in Python stdlib ipaddress 3.10 and below allows...CVE-2021-29921Fix available9.8 Critical
- elastic elasticsearch, oracle communications cloud native core automated test suite +1 moreExposure of Sensitive Information to an Unauthorized ActorCVE-2021-22134Fix available4.3 Medium
- elastic elasticsearch, oracle communications cloud native core automated test suite +1 moreInsufficiently Protected Credentials in ElasticsearchCVE-2021-22132Fix available4.8 Medium
- hibernate hibernate-validator, netapp active iq unified manager, element +185 more +187 moreThe SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacksCVE-2019-10219Public exploitFix available6.5 Medium
- jenkins, oracle communications cloud native core automated test suite, redhat openshift container platform +2 moreCross-Site Request Forgery in JenkinsCVE-2019-10384Fix available8.8 High
- jenkins, oracle communications cloud native core automated test suite, redhat openshift container platform +2 moreImproper Neutralization of Input During Web Page Generation in JenkinsCVE-2019-10383Fix available4.8 Medium
- jenkins, oracle communications cloud native core automated test suite, redhat openshift container platform +2 moreImproper Neutralization of Input During Web Page Generation in JenkinsCVE-2019-1003050Fix available5.4 Medium
- jenkins, oracle communications cloud native core automated test suite, redhat openshift container platform +2 moreInsufficient Session Expiration in JenkinsCVE-2019-1003049Fix available8.1 High
- jenkins, oracle communications cloud native core automated test suite +1 moreCross-site scripting vulnerability exists in Jenkins and Stapler PluginCVE-2018-1999007Fix available5.4 Medium
- jenkins, oracle communications cloud native core automated test suite +1 moreImproper Neutralization of Input During Web Page Generation in JenkinsCVE-2018-1999005Fix available5.4 Medium
- jenkins, oracle communications cloud native core automated test suite +1 moreIncorrect Authorization in JenkinsCVE-2018-1999004Fix available4.3 Medium
- jenkins, oracle communications cloud native core automated test suite +1 moreIncorrect Authorization in JenkinsCVE-2018-1999003Fix available4.3 Medium
- jenkins, oracle communications cloud native core automated test suite +1 moreImproper Input Validation in JenkinsCVE-2018-1999002Public exploitFix availableEPSS 86.6%7.5 High
- jenkins, oracle communications cloud native core automated test suite +1 moreImproper Input Validation in JenkinsCVE-2018-1999001Fix availableEPSS 18.1%8.8 High
- jenkins, oracle communications cloud native core automated test suite +1 moreCross-Site Request Forgery in JenkinsCVE-2018-1000195Fix available4.3 Medium
- jenkins, oracle communications cloud native core automated test suite +1 morePath Traversal in JenkinsCVE-2018-1000194Fix available8.1 High
- jenkins, oracle communications cloud native core automated test suite +1 moreInjection in JenkinsCVE-2018-1000193Fix available4.3 Medium
- jenkins, oracle communications cloud native core automated test suite +1 moreExposure of Sensitive Information to an Unauthorized Actor in JenkinsCVE-2018-1000192Fix available4.3 Medium
- jenkins, oracle communications cloud native core automated test suite +1 moreImproper Limitation of a Pathname to a Restricted Directory in JenkinsCVE-2018-6356Fix available6.5 Medium
- jenkins, oracle communications cloud native core automated test suite +1 moreExposure of Sensitive Information to an Unauthorized Actor in JenkinsCVE-2018-1000068Fix available5.3 Medium
- jenkins, oracle communications cloud native core automated test suite +1 moreServer-Side Request Forgery in JenkinsCVE-2018-1000067Fix available5.3 Medium
- jenkins, oracle communications cloud native core automated test suite +1 moreDeserialization of Untrusted Data in JenkinsCVE-2017-1000353In KEVPublic exploitFix availableEPSS 99.7%9.8 Critical