Oracle Communications Cloud Native Core Service Communication Proxy vulnerabilities

• fasterxml jackson-databind, debian linux, netapp active iq unified manager +33 more +35 more Deeply nested json in jackson-databind CVE-2020-36518 Public exploitFix available 7.5 HighMarch 11, 2022
• vmware spring cloud gateway, oracle commerce guided search, communications cloud native core binding support function +7 more +9 more Spring Cloud Gateway vulnerable to Code Injection when Gateway Actuator endpoint enabled, exposed, unsecured CVE-2022-22947 In KEVPublic exploitFix available EPSS 98.3% 10.0 CriticalMarch 3, 2022
• vmware spring framework, oracle communications cloud native core console, communications cloud native core service communication proxy +2 more Log entry injection in Spring Framework CVE-2021-22060 Fix available 4.3 MediumJanuary 7, 2022
• apache log4j, apache software foundation log4j2, debian linux +114 more +116 more Apache Log4j2 does not always protect from infinite recursion in lookup evaluation CVE-2021-45105 Public exploitFix available EPSS 100.0% 5.9 MediumDecember 18, 2021
• vmware spring framework, netapp active iq unified manager, management services for element software and netapp hci +5 more +7 more Improper Output Neutralization for Logs in Spring Framework CVE-2021-22096 Fix available 4.3 MediumOctober 28, 2021
• haxx curl, apple macos, debian linux +26 more +28 more When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using... CVE-2021-22947 Fix available 5.9 MediumSeptember 15, 2021
• haxx curl, apple macos, debian linux +29 more +31 more A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking... CVE-2021-22946 Fix available 7.5 HighSeptember 15, 2021
• eclipse jetty, the eclipse foundation eclipse jetty, netapp e-series santricity os controller +16 more +18 more Encoded URIs can access WEB-INF directory in Eclipse Jetty CVE-2021-34429 Public exploitFix available EPSS 99.3% 5.3 MediumJuly 15, 2021
• apache commons compress, netapp active iq unified manager, oncommand insight +31 more +33 more Apache Commons Compress 1.0 to 1.20 denial of service vulnerability CVE-2021-36090 Fix available EPSS 12.9% 7.5 HighJuly 13, 2021
• apache commons compress, netapp active iq unified manager, oncommand insight +24 more +26 more Apache Commons Compress 1.1 to 1.20 denial of service vulnerability CVE-2021-35517 Fix available EPSS 10.6% 7.5 HighJuly 13, 2021
• apache commons compress, netapp active iq unified manager, oncommand insight +21 more +23 more Apache Commons Compress 1.6 to 1.20 denial of service vulnerability CVE-2021-35516 Fix available EPSS 12.4% 7.5 HighJuly 13, 2021
• apache commons compress, netapp active iq unified manager, oncommand insight +23 more +25 more Apache Commons Compress 1.6 to 1.20 denial of service vulnerability CVE-2021-35515 Fix available EPSS 11.6% 7.5 HighJuly 13, 2021
• apache tomcat, tomee, debian linux +19 more +21 more Incorrect Transfer-Encoding handling with HTTP/1.0 CVE-2021-33037 Fix available EPSS 74.7% 5.3 MediumJuly 12, 2021
• gnupg libgcrypt, debian linux, fedoraproject fedora +8 more +10 more Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks... CVE-2021-33560 Public exploitFix available 7.5 HighJune 8, 2021
• websockets project websockets, oracle communications cloud native core policy, communications cloud native core security edge protection proxy +2 more +4 more Observable Timing Discrepancy in aaugustin websockets library CVE-2021-33880 Fix available 5.9 MediumJune 6, 2021
• redhat xnio, oracle communications cloud native core console, communications cloud native core network repository function +11 more +13 more Uncontrolled Resource Consumption in XNIO CVE-2020-14340 Fix available 5.9 MediumJune 2, 2021
• vmware spring framework, netapp hci, management services for element software +29 more +31 more Improper Privilege Management in Spring Framework CVE-2021-22118 Fix available 7.8 HighMay 27, 2021
• haxx curl, netapp cloud backup, h300e firmware +22 more +24 more curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a... CVE-2021-22897 Fix available 5.3 MediumMay 26, 2021
• haxx curl, netapp active iq unified manager, cloud backup +26 more +28 more curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed... CVE-2021-22901 Fix available EPSS 63.5% 8.1 HighMay 26, 2021
• haxx curl, debian linux, fedoraproject fedora +12 more +14 more curl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option,... CVE-2021-22898 Fix available 3.1 LowMay 26, 2021
• gnu glibc, debian linux, netapp 500f firmware +14 more +16 more The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing... CVE-2020-27618 Fix available 5.5 MediumFebruary 26, 2021
• jetbrains kotlin, oracle communications cloud native core network slice selection function, communications cloud native core policy +1 more +3 more Incorrect Default Permissions in JetBrains Kotlin CVE-2020-29582 Fix available 5.3 MediumFebruary 3, 2021
• kubernetes, oracle communications cloud native core network slice selection function, communications cloud native core policy +1 more +3 more Kubernetes man in the middle using LoadBalancer or ExternalIPs CVE-2020-8554 Public exploitFix available 6.3 MediumJanuary 21, 2021
• apache httpclient, netapp active iq unified manager, snapcenter +14 more +16 more Cross-site scripting in Apache HttpClient CVE-2020-13956 Fix available 5.3 MediumOctober 10, 2020
• netty, debian linux, fedoraproject fedora +10 more +12 more Denial of Service in Netty CVE-2020-11612 Fix available 7.5 HighApril 7, 2020
• hibernate hibernate-validator, netapp active iq unified manager, element +185 more +187 more The SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks CVE-2019-10219 Public exploitFix available 6.5 MediumNovember 8, 2019