Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle communications cloud native core binding support function 1.10.0 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2022-22965
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e....
Vmware Spring FrameworkCisco Cx Cloud AgentOracle Sd-wan Edge 9.0Oracle Retail Xstore Point Of Service 20.0.1Oracle Communications Cloud Native Core Security Edge Protection Proxy 1.7.0Oracle Financial Services Analytical Applications Infrastructure 8.1.1Oracle Sd-wan Edge 9.1Siemens Siveillance Identity 1.6Siemens Siveillance Identity 1.5Siemens Sipass Integrated 2.85Siemens Sipass Integrated 2.80Oracle Product Lifecycle Analytics 3.6.1Oracle Financial Services Enterprise Case Management 8.1.1.0Oracle Financial Services Enterprise Case Management 8.1.1.1Oracle Financial Services Behavior Detection Platform 8.1.2.0Oracle Financial Services Behavior Detection Platform 8.1.1.1Oracle Financial Services Behavior Detection Platform 8.1.1.0Oracle Communications Cloud Native Core Console 1.9.0Oracle Communications Cloud Native Core Policy 1.15.0Oracle Communications Cloud Native Core Unified Data Repository 1.15.0Oracle Communications Cloud Native Core Unified Data Repository 22.1.0Oracle Communications Cloud Native Core Security Edge Protection Proxy 22.1.0
6.8
CVSSv2
CVE-2022-22947
In spring cloud gateway versions before 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted request that could allow arbitrary remote ex...
Vmware Spring Cloud Gateway 3.1.0Vmware Spring Cloud GatewayOracle Commerce Guided Search 11.3.2Oracle Communications Cloud Native Core Network Slice Selection Function 1.8.0Oracle Communications Cloud Native Core Network Slice Selection Function 22.1.0Oracle Communications Cloud Native Core Network Repository Function 1.15.0Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0Oracle Communications Cloud Native Core Network Exposure Function 22.1.0Oracle Communications Cloud Native Core Service Communication Proxy 1.15.0Oracle Communications Cloud Native Core Network Repository Function 1.15.1Oracle Communications Cloud Native Core Binding Support Function 1.11.0Oracle Communications Cloud Native Core Binding Support Function 22.1.3Oracle Communications Cloud Native Core Network Repository Function 22.2.0Oracle Communications Cloud Native Core Security Edge Protection Proxy 22.1.1Oracle Communications Cloud Native Core Console 22.2.0Oracle Communications Cloud Native Core Network Repository Function 22.1.2
6.8
CVSSv2
CVE-2021-22901
curl 7.75.0 up to and including 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when a TLS 1.3 session ticket arrives over a connection. A malicious server can use this in rare unfortunate circumstances to potentially reach remote c...
Haxx CurlOracle Mysql ServerOracle EssbaseOracle Communications Cloud Native Core Network Slice Selection Function 1.8.0Oracle Communications Cloud Native Core Network Repository Function 1.15.0Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0Oracle Communications Cloud Native Core Service Communication Proxy 1.15.0Oracle Communications Cloud Native Core Network Repository Function 1.15.1Oracle Communications Cloud Native Core Binding Support Function 1.11.0Netapp Cloud Backup -Netapp Snapcenter -Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp Solidfire \\& Hci Management Node -Netapp Active Iq Unified Manager -Netapp Solidfire Baseboard Management Controller Firmware -Netapp Solidfire\\, Enterprise Sds \\& Hci Storage Node -Netapp Hci Compute Node Firmware -Netapp H300e Firmware -Netapp H300s Firmware -Netapp H410s Firmware -Netapp H500e Firmware -
6.5
CVSSv2
CVE-2021-39139
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote malicious user to load and execute arbitrary code from a remote host only by manipulating the processed input stream. A user is only affected if usin...
Xstream Project XstreamDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Fedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35Netapp Snapmanager -Oracle Webcenter Portal 12.2.1.3.0Oracle Utilities Framework 4.2.0.3.0Oracle Utilities Framework 4.2.0.2.0Oracle Utilities Framework 4.3.0.6.0Oracle Utilities Framework 4.4.0.0.0Oracle Communications Unified Inventory Management 7.3.4Oracle Communications Unified Inventory Management 7.3.5Oracle Communications Unified Inventory Management 7.4.0Oracle Webcenter Portal 12.2.1.4.0Oracle Utilities Framework 4.4.0.2.0Oracle Communications Billing And Revenue Management Elastic Charging Engine 11.3Oracle Communications Billing And Revenue Management Elastic Charging Engine 12.0Oracle Business Activity Monitoring 12.2.1.4.0Oracle Commerce Guided Search 11.3.2
6.3
CVSSv2
CVE-2021-39140
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote malicious user to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such a payload resulting in a denial of ...
Xstream Project XstreamDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Fedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35Netapp Snapmanager -Oracle Webcenter Portal 12.2.1.3.0Oracle Utilities Framework 4.2.0.3.0Oracle Utilities Framework 4.2.0.2.0Oracle Utilities Framework 4.3.0.6.0Oracle Utilities Framework 4.4.0.0.0Oracle Communications Unified Inventory Management 7.3.4Oracle Communications Unified Inventory Management 7.3.5Oracle Communications Unified Inventory Management 7.4.0Oracle Webcenter Portal 12.2.1.4.0Oracle Utilities Framework 4.4.0.2.0Oracle Communications Billing And Revenue Management Elastic Charging Engine 11.3Oracle Communications Billing And Revenue Management Elastic Charging Engine 12.0Oracle Business Activity Monitoring 12.2.1.4.0Oracle Commerce Guided Search 11.3.2
6
CVSSv2
CVE-2021-39150
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote malicious user to request data from internal resources that are not publicly available only by manipulating the processed input stream with a Java ru...
Xstream Project XstreamFedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Netapp Snapmanager -Oracle Webcenter Portal 12.2.1.3.0Oracle Utilities Framework 4.2.0.3.0Oracle Utilities Framework 4.2.0.2.0Oracle Utilities Framework 4.3.0.6.0Oracle Utilities Framework 4.4.0.0.0Oracle Communications Unified Inventory Management 7.3.4Oracle Communications Unified Inventory Management 7.3.5Oracle Communications Unified Inventory Management 7.4.0Oracle Webcenter Portal 12.2.1.4.0Oracle Utilities Framework 4.4.0.2.0Oracle Communications Billing And Revenue Management Elastic Charging Engine 11.3Oracle Communications Billing And Revenue Management Elastic Charging Engine 12.0Oracle Business Activity Monitoring 12.2.1.4.0Oracle Commerce Guided Search 11.3.2
6
CVSSv2
CVE-2021-39152
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote malicious user to request data from internal resources that are not publicly available only by manipulating the processed input stream with a Java ru...
Xstream Project XstreamFedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Netapp Snapmanager -Oracle Webcenter Portal 12.2.1.3.0Oracle Utilities Framework 4.2.0.3.0Oracle Utilities Framework 4.2.0.2.0Oracle Utilities Framework 4.3.0.6.0Oracle Utilities Framework 4.4.0.0.0Oracle Communications Unified Inventory Management 7.3.4Oracle Communications Unified Inventory Management 7.3.5Oracle Communications Unified Inventory Management 7.4.0Oracle Webcenter Portal 12.2.1.4.0Oracle Utilities Framework 4.4.0.2.0Oracle Communications Billing And Revenue Management Elastic Charging Engine 11.3Oracle Communications Billing And Revenue Management Elastic Charging Engine 12.0Oracle Business Activity Monitoring 12.2.1.4.0Oracle Commerce Guided Search 11.3.2
6
CVSSv2
CVE-2021-39144
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user is affected, who followed the...
Xstream Project XstreamDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Fedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35Netapp Snapmanager -Oracle Webcenter Portal 12.2.1.3.0Oracle Utilities Framework 4.2.0.3.0Oracle Utilities Framework 4.2.0.2.0Oracle Utilities Framework 4.3.0.6.0Oracle Utilities Framework 4.4.0.0.0Oracle Communications Unified Inventory Management 7.3.4Oracle Communications Unified Inventory Management 7.3.5Oracle Communications Unified Inventory Management 7.4.0Oracle Webcenter Portal 12.2.1.4.0Oracle Utilities Framework 4.4.0.2.0Oracle Communications Billing And Revenue Management Elastic Charging Engine 11.3Oracle Communications Billing And Revenue Management Elastic Charging Engine 12.0Oracle Business Activity Monitoring 12.2.1.4.0Oracle Commerce Guided Search 11.3.2
6
CVSSv2
CVE-2021-39145
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote malicious user to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who follow...
Xstream Project XstreamDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Fedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35Netapp Snapmanager -Oracle Webcenter Portal 12.2.1.3.0Oracle Utilities Framework 4.2.0.3.0Oracle Utilities Framework 4.2.0.2.0Oracle Utilities Framework 4.3.0.6.0Oracle Utilities Framework 4.4.0.0.0Oracle Communications Unified Inventory Management 7.3.4Oracle Communications Unified Inventory Management 7.3.5Oracle Communications Unified Inventory Management 7.4.0Oracle Webcenter Portal 12.2.1.4.0Oracle Utilities Framework 4.4.0.2.0Oracle Communications Billing And Revenue Management Elastic Charging Engine 11.3Oracle Communications Billing And Revenue Management Elastic Charging Engine 12.0Oracle Business Activity Monitoring 12.2.1.4.0Oracle Commerce Guided Search 11.3.2
6
CVSSv2
CVE-2021-39146
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote malicious user to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who follow...
Xstream Project XstreamFedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Netapp Snapmanager -Oracle Webcenter Portal 12.2.1.3.0Oracle Utilities Framework 4.2.0.3.0Oracle Utilities Framework 4.2.0.2.0Oracle Retail Xstore Point Of Service 17.0.2Oracle Utilities Framework 4.3.0.6.0Oracle Utilities Framework 4.4.0.0.0Oracle Communications Unified Inventory Management 7.3.4Oracle Communications Unified Inventory Management 7.3.5Oracle Communications Unified Inventory Management 7.4.0Oracle Webcenter Portal 12.2.1.4.0Oracle Utilities Framework 4.4.0.2.0Oracle Communications Billing And Revenue Management Elastic Charging Engine 11.3Oracle Communications Billing And Revenue Management Elastic Charging Engine 12.0Oracle Business Activity Monitoring 12.2.1.4.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook