Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle communications cloud native core network repository function 1.15.1 vulnerabilities and exploits

(subscribe to this query)

10
CVSSv3
CVE-2022-22947
In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted request that could allow arbitrary remote...
Vmware Spring Cloud Gateway 3.1.0Vmware Spring Cloud GatewayOracle Commerce Guided Search 11.3.2Oracle Communications Cloud Native Core Network Slice Selection Function 1.8.0Oracle Communications Cloud Native Core Network Slice Selection Function 22.1.0Oracle Communications Cloud Native Core Network Repository Function 1.15.0Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0Oracle Communications Cloud Native Core Network Exposure Function 22.1.0Oracle Communications Cloud Native Core Service Communication Proxy 1.15.0Oracle Communications Cloud Native Core Network Repository Function 1.15.1Oracle Communications Cloud Native Core Binding Support Function 1.11.0Oracle Communications Cloud Native Core Binding Support Function 22.1.3Oracle Communications Cloud Native Core Network Repository Function 22.2.0Oracle Communications Cloud Native Core Security Edge Protection Proxy 22.1.1Oracle Communications Cloud Native Core Console 22.2.0Oracle Communications Cloud Native Core Network Repository Function 22.1.2
7.5
CVSSv3
CVE-2021-33560
Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, and the window size is not chosen appropriately. This, for example, affects use of ElGamal in OpenPGP....
Gnupg LibgcryptDebian Debian Linux 9.0Fedoraproject Fedora 33Fedoraproject Fedora 34Oracle Communications Cloud Native Core Network Repository Function 1.14.0Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.9.0Oracle Communications Cloud Native Core Network Slice Selection Function 1.8.0Oracle Communications Cloud Native Core Network Repository Function 1.15.0Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0Oracle Communications Cloud Native Core Service Communication Proxy 1.15.0Oracle Communications Cloud Native Core Network Repository Function 1.15.1Oracle Communications Cloud Native Core Binding Support Function 1.11.0
3.1
CVSSv3
CVE-2021-22898
curl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option, known as `CURLOPT_TELNETOPTIONS` in libcurl, is used to send variable=content pairs to TELNET servers. Due to a flaw in the option parser for sending NEW_ENV variables, libcurl...
Haxx CurlDebian Debian Linux 9.0Fedoraproject Fedora 33Fedoraproject Fedora 34Oracle Mysql ServerOracle EssbaseOracle Communications Cloud Native Core Network Slice Selection Function 1.8.0Oracle Communications Cloud Native Core Network Repository Function 1.15.0Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0Oracle Communications Cloud Native Core Service Communication Proxy 1.15.0Oracle Communications Cloud Native Core Network Repository Function 1.15.1Oracle Communications Cloud Native Core Binding Support Function 1.11.0Siemens Sinec Infrastructure Network Services
5.5
CVSSv3
CVE-2021-22569
An issue in protobuf-java allowed the interleaving of com.google.protobuf.UnknownFieldSet fields in such a way that would be processed out of order. A small malicious payload can occupy the parser for several minutes by creating large numbers of short-lived objects that cause...
Google Protobuf-kotlinGoogle Protobuf-javaGoogle Google-protobufOracle Communications Cloud Native Core Console 1.9.0Oracle Communications Cloud Native Core Policy 1.15.0Oracle Communications Cloud Native Core Network Repository Function 1.15.0Oracle Communications Cloud Native Core Network Repository Function 1.15.1Oracle Spatial And Graph Mapviewer 21cOracle Spatial And Graph Mapviewer 19c
9.8
CVSSv3
CVE-2021-43527
NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures. Applications using NSS for handling signatures encoded within CMS, S/MIME, PKCS \#7, or PKCS \#12 are likely to be...
Mozilla Nss EsrMozilla NssNetapp Cloud Backup -Netapp E-series Santricity Os ControllerOracle Communications Cloud Native Core Network Slice Selection Function 1.8.0Oracle Communications Cloud Native Core Network Repository Function 1.15.0Oracle Communications Cloud Native Core Network Repository Function 1.15.1Oracle Communications Cloud Native Core Binding Support Function 1.11.0Oracle Communications Policy Management 12.6.0.0.0Starwindsoftware Starwind Virtual San V8r13Starwindsoftware Starwind San \\& Nas V8r13
5.3
CVSSv3
CVE-2021-22897
curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for CURLOPT_SSL_CIPHER_LIST when libcurl is built to use the Schannel TLS library. The selected cipher set was stored in a single "static" variable in the...
Haxx CurlOracle Mysql ServerOracle EssbaseOracle Communications Cloud Native Core Network Slice Selection Function 1.8.0Oracle Communications Cloud Native Core Network Repository Function 1.15.0Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0Oracle Communications Cloud Native Core Service Communication Proxy 1.15.0Oracle Communications Cloud Native Core Network Repository Function 1.15.1Oracle Communications Cloud Native Core Binding Support Function 1.11.0Netapp Cloud Backup -Netapp Solidfire \\& Hci Management Node -Netapp Solidfire Baseboard Management Controller Firmware -Netapp Solidfire\\, Enterprise Sds \\& Hci Storage Node -Netapp Hci Compute Node Firmware -Netapp H300e Firmware -Netapp H300s Firmware -Netapp H410s Firmware -Netapp H500e Firmware -Netapp H500s Firmware -Netapp H700e Firmware -Netapp H700s Firmware -Siemens Sinec Infrastructure Network Services
5.9
CVSSv3
CVE-2021-22947
When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can respond and send back multiple responses at once that curl caches. curl would then upgrade to TLS but not flush the in-queue of...
Haxx CurlFedoraproject Fedora 33Fedoraproject Fedora 35Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Netapp Cloud Backup -Netapp Clustered Data Ontap -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -Netapp H500e Firmware -Netapp H700e Firmware -Netapp H410s Firmware -Netapp Solidfire Baseboard Management Controller Firmware -Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Mysql ServerOracle Communications Cloud Native Core Network Slice Selection Function 1.8.0Oracle Communications Cloud Native Core Network Repository Function 1.15.0Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0Oracle Communications Cloud Native Core Service Communication Proxy 1.15.0Oracle Communications Cloud Native Core Network Repository Function 1.15.1Oracle Communications Cloud Native Core Binding Support Function 1.11.0Siemens Sinec Infrastructure Network ServicesApple MacosOracle Commerce Guided Search 11.3.2Oracle Communications Cloud Native Core Binding Support Function 22.1.3Oracle Communications Cloud Native Core Network Repository Function 22.2.0Oracle Communications Cloud Native Core Security Edge Protection Proxy 22.1.1Oracle Communications Cloud Native Core Console 22.2.0Oracle Communications Cloud Native Core Network Repository Function 22.1.2
7.5
CVSSv3
CVE-2021-22946
A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server (`--ssl-reqd` on the command line or`CURLOPT_USE_SSL` set to `CURLUSESSL_CONTROL` or `CURLUSESSL_ALL` withlibcurl). This requirement could be...
Haxx CurlDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Fedoraproject Fedora 33Fedoraproject Fedora 35Netapp Cloud Backup -Netapp Snapcenter -Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp Clustered Data Ontap -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -Netapp H500e Firmware -Netapp H700e Firmware -Netapp H410s Firmware -Netapp Solidfire Baseboard Management Controller Firmware -Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Mysql ServerOracle Communications Cloud Native Core Network Slice Selection Function 1.8.0Oracle Communications Cloud Native Core Network Repository Function 1.15.0Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0Oracle Communications Cloud Native Core Service Communication Proxy 1.15.0Oracle Communications Cloud Native Core Network Repository Function 1.15.1Oracle Communications Cloud Native Core Binding Support Function 1.11.0Apple MacosSiemens Sinec Infrastructure Network ServicesOracle Commerce Guided Search 11.3.2Oracle Communications Cloud Native Core Network Repository Function 22.1.0Oracle Communications Cloud Native Core Binding Support Function 22.1.3Oracle Communications Cloud Native Core Network Repository Function 22.2.0Oracle Communications Cloud Native Core Security Edge Protection Proxy 22.1.1Oracle Communications Cloud Native Core Console 22.2.0
8.1
CVSSv3
CVE-2021-22901
curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when a TLS 1.3 session ticket arrives over a connection. A malicious server can use this in rare unfortunate circumstances to potentially reach remote code...
Haxx CurlOracle Mysql ServerOracle EssbaseOracle Communications Cloud Native Core Network Slice Selection Function 1.8.0Oracle Communications Cloud Native Core Network Repository Function 1.15.0Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0Oracle Communications Cloud Native Core Service Communication Proxy 1.15.0Oracle Communications Cloud Native Core Network Repository Function 1.15.1Oracle Communications Cloud Native Core Binding Support Function 1.11.0Netapp Cloud Backup -Netapp Snapcenter -Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp Solidfire \\& Hci Management Node -Netapp Active Iq Unified Manager -Netapp Solidfire Baseboard Management Controller Firmware -Netapp Solidfire\\, Enterprise Sds \\& Hci Storage Node -Netapp Hci Compute Node Firmware -Netapp H300e Firmware -Netapp H300s Firmware -Netapp H410s Firmware -Netapp H500e Firmware -Netapp H500s Firmware -Netapp H700e Firmware -Netapp H700s Firmware -Siemens Sinec Infrastructure Network Services
5.9
CVSSv3
CVE-2021-45105
Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is...
Apache Log4jNetapp Cloud Manager -Debian Debian Linux 10.0Debian Debian Linux 11.0Sonicwall Network Security ManagerSonicwall Email SecuritySonicwall Web Application FirewallSonicwall 6bk1602-0aa12-0tp0 FirmwareSonicwall 6bk1602-0aa22-0tp0 FirmwareSonicwall 6bk1602-0aa32-0tp0 FirmwareSonicwall 6bk1602-0aa42-0tp0 FirmwareSonicwall 6bk1602-0aa52-0tp0 FirmwareOracle E-business Suite 12.2Oracle Retail Back Office 14.1Oracle Weblogic Server 12.2.1.3.0Oracle Webcenter Portal 12.2.1.3.0Oracle Webcenter Sites 12.2.1.3.0Oracle Managed File Transfer 12.2.1.3.0Oracle Retail Order Broker 16.0Oracle Retail Integration Bus 14.1.3Oracle Retail Returns Management 14.1Oracle Retail Central Office 14.1Oracle Primavera Unifier 18.8Oracle Retail Point-of-service 14.1Oracle Instantis Enterprisetrack 17.1Oracle Instantis Enterprisetrack 17.2Oracle Instantis Enterprisetrack 17.3Oracle Weblogic Server 12.2.1.4.0Oracle Business Intelligence 5.5.0.0.0Oracle Primavera Unifier 19.12Oracle Communications Unified Inventory Management 7.3.5Oracle Webcenter Sites 12.2.1.4.0Oracle Identity Management Suite 12.2.1.3.0Oracle Data Integrator 12.2.1.3.0Oracle Flexcube Universal BankingOracle Banking Platform 2.6.2Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Utilities Framework 4.4.0.0.0Oracle Agile Plm 9.3.6Oracle Webcenter Portal 12.2.1.4.0Oracle Weblogic Server 14.1.1.0.0Oracle Communications Services Gatekeeper 7.0Oracle Retail Service Backbone 14.1.3Oracle Primavera Unifier 20.12Oracle Managed File Transfer 12.2.1.4.0Oracle Retail Order Broker 18.0Oracle Communications Interactive Session Recorder 6.3Oracle Communications Interactive Session Recorder 6.4Oracle Retail Service Backbone 15.0.3.1Oracle Retail Service Backbone 14.1.3.2Oracle Primavera GatewayOracle Retail Price Management 14.1.3.0Oracle Retail Price Management 15.0.3.0Oracle Retail Price Management 16.0.3.0Oracle Retail Order Broker 19.1Oracle Communications Ip Service Activator 7.4.0Oracle Communications Performance Intelligence Center 10.4.0.3Oracle Communications Evolved Communications Application Server 7.1Oracle Communications Unified Inventory Management 7.4.1Oracle Communications Network Integrity 7.3.6Oracle Jdeveloper 12.2.1.4.0Oracle Data Integrator 12.2.1.4.0Oracle Banking Platform 2.7.1Oracle Enterprise Manager Ops Center 12.4.0.0Oracle Enterprise Manager For Peoplesoft 13.4.1.1Oracle Enterprise Manager Base Platform 13.5.0.0Oracle Enterprise Manager Base Platform 13.4.0.0Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Insurance Insbridge Rating And Underwriting 5.6.1.0Oracle Agile Engineering Data Management 6.2.1.0Oracle Retail Merchandising System 16.0.3Oracle Utilities Framework 4.4.0.2.0Oracle Utilities Framework 4.4.0.3.0Oracle Utilities FrameworkOracle Retail Service Backbone 19.0.1.0Oracle Retail Integration Bus 14.1.3.2Oracle Retail Eftlink 16.0.3Oracle Retail Eftlink 17.0.2Oracle Retail Eftlink 18.0.1Oracle Retail Eftlink 19.0.1Oracle Retail Integration Bus 15.0.3.1Oracle Financial Services Model Management And Governance 8.1.0.0.0Oracle Financial Services Model Management And Governance 8.0.8.0.0Oracle Financial Services Analytical Applications InfrastructureOracle Primavera Unifier 21.12Oracle Siebel Ui FrameworkOracle Retail Service Backbone 19.0.0Oracle Retail Price Management 13.2Oracle Retail Price Management 14.0.4Oracle Retail Predictive Application Server 14.1.3.46Oracle Retail Predictive Application Server 15.0.3.115Oracle Retail Predictive Application Server 16.0.3.240Oracle Retail Order Management System 19.5Oracle Retail Invoice Matching 15.0.3Oracle Retail Invoice Matching 16.0.3Oracle Retail Integration BusOracle Retail Eftlink 20.0.1Oracle Financial Services Model Management And Governance 8.1.1.0.0Oracle Primavera P6 Enterprise Project Portfolio Management 21.12.0.0Oracle Primavera P6 Enterprise Project Portfolio ManagementOracle Primavera Gateway 21.12.0Oracle Communications Diameter Signaling RouterOracle Communications Webrtc Session Controller 7.2.0.0Oracle Communications Webrtc Session Controller 7.2.1Oracle Communications Service Broker 6.2Oracle Communications Messaging Server 8.1Oracle Communications Convergent Charging ControllerOracle Communications Convergent Charging Controller 6.0.1.0.0Oracle Communications Convergence 3.0.2.2.0Oracle Communications Billing And Revenue Management 12.0.0.4Oracle Communications Asap 7.3Oracle Communications Session Route ManagerOracle Communications Session Report ManagerOracle Communications Element ManagerOracle Communications Eagle Ftp Table Base Retrieval 4.5Oracle Communications Cloud Native Core Security Edge Protection Proxy 1.7.0Oracle Communications Unified Inventory Management 7.4.2Oracle Communications Pricing Design Center 12.0.0.4Oracle Communications Pricing Design Center 12.0.0.5Oracle Communications Network Charging And ControlOracle Communications Network Charging And Control 6.0.1.0.0Oracle Banking Platform 2.12.0Oracle Banking Party Management 2.7.0Oracle Banking Loans Servicing 2.12.0Oracle Banking Enterprise Default Management 2.7.1Oracle Banking Enterprise Default Management 2.12.0Oracle Banking Deposits And Lines Of Credit Servicing 2.12.0Oracle Hospitality Suite8 8.13.0Oracle Hospitality Suite8 8.14.0Oracle Healthcare Translational Research 4.1.0Oracle Healthcare Data Repository 8.1.1Oracle Insurance Insbridge Rating And Underwriting 5.2.0Oracle Retail Service BackboneOracle Retail Service Backbone 19.0.1Oracle Retail Merchandising System 19.0.1Oracle Retail Integration Bus 19.0.1Oracle Retail Integration Bus 19.0.0Oracle Retail Financial Integration 14.1.3.2Oracle Retail Financial Integration 15.0.3.1Oracle Retail Financial Integration 19.0.1Oracle Autovue For Agile Product Lifecycle Management 21.0.2Oracle Agile Plm Mcad Connector 3.6Oracle Communications Convergence 3.0.3.0Oracle Communications Billing And Revenue Management 12.0.0.5Oracle Sql DeveloperOracle Communications User Data Repository 12.4Oracle Communications Eagle Element Management System 46.6Oracle Communications Cloud Native Core Unified Data Repository 1.15.0Oracle Communications Cloud Native Core Service Communication Proxy 1.15.0Oracle Communications Cloud Native Core Policy 1.15.0Oracle Communications Cloud Native Core Network Slice Selection Function 1.8.0Oracle Communications Cloud Native Core Network Repository Function 1.15.0Oracle Communications Cloud Native Core Network Repository Function 1.15.1Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0Oracle Communications Cloud Native Core Console 1.9.0Oracle Management Cloud Engine 1.5.0Oracle Identity Manager Connector 9.1.0Oracle Identity Management Suite 12.2.1.4.0Oracle Flexcube Universal Banking 11.83.3Oracle Flexcube Universal Banking 14.5Oracle Banking Treasury Management 14.5Oracle Banking Trade Finance 14.5Oracle Banking Payments 14.5Oracle Enterprise Manager For Peoplesoft 13.5.1.1Oracle Payment Interface 19.1Oracle Payment Interface 20.3Oracle Hospitality Token Proxy Service 19.2Oracle Healthcare Translational Research 4.1.1Oracle Healthcare Master Person Index 5.0.1Oracle Healthcare FoundationOracle Health Sciences Information ManagerOracle Health Sciences Inform 6.3.2.1Oracle Health Sciences Inform 7.0.0.0Oracle Health Sciences Inform 6.2.1.1Oracle Health Sciences Empirica Signal 9.2.0.0Oracle Health Sciences Empirica Signal 9.1.0.6Oracle Mysql Enterprise MonitorOracle Insurance Insbridge Rating And UnderwritingOracle Insurance Data Gateway 1.0.1Oracle Hyperion Tax ProvisionOracle Hyperion Profitability And Cost ManagementOracle Hyperion PlanningOracle Hyperion Infrastructure TechnologyOracle Hyperion Data Relationship ManagementOracle Hyperion Bi\\+Oracle Retail Store Inventory Management 14.1.3.14Oracle Retail Store Inventory Management 14.1.3.5Oracle Retail Store Inventory Management 15.0.3.3Oracle Retail Store Inventory Management 15.0.3.8Oracle Retail Store Inventory Management 16.0.3.7Oracle Retail Store Inventory Management 14.0.4.13Oracle Retail Financial IntegrationOracle Retail Financial Integration 19.0.0Oracle Retail Eftlink 21.0.0Oracle Retail Data Extractor For Merchandising 15.0.2Oracle Retail Data Extractor For Merchandising 16.0.2Oracle Retail Customer Insights 16.0.2Oracle Retail Customer Insights 15.0.2Oracle Taleo Platform
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversalCVE-2023-21068CVE-2023-21077unspecifiedCVE-2023-21070CVE-2023-21016file upload
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook