Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle communications cloud native core network repository function 22.1.2 vulnerabilities and exploits

(subscribe to this query)

10
CVSSv3
CVE-2022-22947
In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted request that could allow arbitrary remote...
Vmware Spring Cloud Gateway 3.1.0Vmware Spring Cloud GatewayOracle Commerce Guided Search 11.3.2Oracle Communications Cloud Native Core Network Slice Selection Function 1.8.0Oracle Communications Cloud Native Core Network Slice Selection Function 22.1.0Oracle Communications Cloud Native Core Network Repository Function 1.15.0Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0Oracle Communications Cloud Native Core Network Exposure Function 22.1.0Oracle Communications Cloud Native Core Service Communication Proxy 1.15.0Oracle Communications Cloud Native Core Network Repository Function 1.15.1Oracle Communications Cloud Native Core Binding Support Function 1.11.0Oracle Communications Cloud Native Core Binding Support Function 22.1.3Oracle Communications Cloud Native Core Network Repository Function 22.2.0Oracle Communications Cloud Native Core Security Edge Protection Proxy 22.1.1Oracle Communications Cloud Native Core Console 22.2.0Oracle Communications Cloud Native Core Network Repository Function 22.1.2
5.5
CVSSv3
CVE-2022-22946
In spring cloud gateway versions prior to 3.1.1+ , applications that are configured to enable HTTP2 and no key store or trusted certificates are set will be configured to use an insecure TrustManager. This makes the gateway able to connect to remote services with invalid or...
Vmware Spring Cloud Gateway 3.1.0Oracle Commerce Guided Search 11.3.2Oracle Communications Cloud Native Core Binding Support Function 22.1.3Oracle Communications Cloud Native Core Network Repository Function 22.2.0Oracle Communications Cloud Native Core Security Edge Protection Proxy 22.1.1Oracle Communications Cloud Native Core Console 22.2.0Oracle Communications Cloud Native Core Network Repository Function 22.1.2
7.5
CVSSv3
CVE-2021-43396
** DISPUTED ** In iconvdata/iso-2022-jp-3.c in the GNU C Library (aka glibc) 2.34, remote attackers can force iconv() to emit a spurious '\0' character via crafted ISO-2022-JP-3 data that is accompanied by an internal state reset. This may affect data integrity in...
Gnu Glibc 2.34Oracle Communications Cloud Native Core Network Function Cloud Native Environment 22.1.0Oracle Communications Cloud Native Core Binding Support Function 22.1.3Oracle Communications Cloud Native Core Network Repository Function 22.2.0Oracle Communications Cloud Native Core Security Edge Protection Proxy 22.1.1Oracle Communications Cloud Native Core Network Repository Function 22.1.2Oracle Enterprise Operations Monitor 4.3Oracle Enterprise Operations Monitor 4.4Oracle Enterprise Operations Monitor 5.0Oracle Communications Cloud Native Core Unified Data Repository 22.2.0
9.8
CVSSv3
CVE-2022-23219
The deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its hostname argument on the stack without validating its length, which may result in a buffer overflow, potentially resulting in a denial of service or...
Gnu GlibcOracle Communications Cloud Native Core Network Function Cloud Native Environment 22.1.0Oracle Communications Cloud Native Core Binding Support Function 22.1.3Oracle Communications Cloud Native Core Network Repository Function 22.2.0Oracle Communications Cloud Native Core Security Edge Protection Proxy 22.1.1Oracle Communications Cloud Native Core Network Repository Function 22.1.2Oracle Enterprise Operations Monitor 4.3Oracle Enterprise Operations Monitor 4.4Oracle Enterprise Operations Monitor 5.0Oracle Communications Cloud Native Core Unified Data Repository 22.2.0Debian Debian Linux 10.0
7.5
CVSSv3
CVE-2021-38604
In librt in the GNU C Library (aka glibc) through 2.34, sysdeps/unix/sysv/linux/mq_notify.c mishandles certain NOTIFY_REMOVED data, leading to a NULL pointer dereference. NOTE: this vulnerability was introduced as a side effect of the CVE-2021-33574 fix....
Gnu GlibcFedoraproject Fedora 35Oracle Communications Cloud Native Core Network Function Cloud Native Environment 22.1.0Oracle Communications Cloud Native Core Binding Support Function 22.1.3Oracle Communications Cloud Native Core Network Repository Function 22.2.0Oracle Communications Cloud Native Core Security Edge Protection Proxy 22.1.1Oracle Communications Cloud Native Core Network Repository Function 22.1.2Oracle Enterprise Operations Monitor 4.3Oracle Enterprise Operations Monitor 4.4Oracle Enterprise Operations Monitor 5.0Oracle Communications Cloud Native Core Unified Data Repository 22.2.0
5.9
CVSSv3
CVE-2021-22947
When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can respond and send back multiple responses at once that curl caches. curl would then upgrade to TLS but not flush the in-queue of...
Haxx CurlFedoraproject Fedora 33Fedoraproject Fedora 35Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Netapp Cloud Backup -Netapp Clustered Data Ontap -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -Netapp H500e Firmware -Netapp H700e Firmware -Netapp H410s Firmware -Netapp Solidfire Baseboard Management Controller Firmware -Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Mysql ServerOracle Communications Cloud Native Core Network Slice Selection Function 1.8.0Oracle Communications Cloud Native Core Network Repository Function 1.15.0Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0Oracle Communications Cloud Native Core Service Communication Proxy 1.15.0Oracle Communications Cloud Native Core Network Repository Function 1.15.1Oracle Communications Cloud Native Core Binding Support Function 1.11.0Siemens Sinec Infrastructure Network ServicesApple MacosOracle Commerce Guided Search 11.3.2Oracle Communications Cloud Native Core Binding Support Function 22.1.3Oracle Communications Cloud Native Core Network Repository Function 22.2.0Oracle Communications Cloud Native Core Security Edge Protection Proxy 22.1.1Oracle Communications Cloud Native Core Console 22.2.0Oracle Communications Cloud Native Core Network Repository Function 22.1.2
9.8
CVSSv3
CVE-2022-22963
In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources....
Vmware Spring Cloud FunctionOracle Sd-wan Edge 9.0Oracle Retail Xstore Point Of Service 20.0.1Oracle Communications Cloud Native Core Security Edge Protection Proxy 1.7.0Oracle Banking Cash Management 14.5Oracle Banking Trade Finance Process Management 14.5Oracle Banking Credit Facilities Process Management 14.5Oracle Banking Corporate Lending Process Management 14.5Oracle Banking Supply Chain Finance 14.5Oracle Sd-wan Edge 9.1Oracle Communications Cloud Native Core Console 1.9.0Oracle Communications Cloud Native Core Network Slice Selection Function 1.8.0Oracle Communications Cloud Native Core Network Slice Selection Function 22.1.0Oracle Communications Cloud Native Core Policy 1.15.0Oracle Communications Cloud Native Core Policy 22.1.0Oracle Communications Cloud Native Core Security Edge Protection Proxy 22.1.0Oracle Communications Cloud Native Core Unified Data Repository 1.15.0Oracle Communications Cloud Native Core Unified Data Repository 22.1.0Oracle Communications Communications Policy Management 12.6.0.0.0Oracle Financial Services Behavior Detection Platform 8.1.1.0Oracle Financial Services Behavior Detection Platform 8.1.1.1Oracle Financial Services Behavior Detection Platform 8.1.2.0Oracle Financial Services Enterprise Case Management 8.1.1.0Oracle Financial Services Enterprise Case Management 8.1.1.1Oracle Mysql Enterprise MonitorOracle Banking Liquidity Management 14.2Oracle Banking Virtual Account Management 14.5Oracle Banking Liquidity Management 14.5Oracle Communications Cloud Native Core Automated Test Suite 1.9.0Oracle Communications Cloud Native Core Automated Test Suite 22.1.0Oracle Communications Cloud Native Core Console 22.1.0Oracle Communications Cloud Native Core Network Exposure Function 22.1.0Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0Oracle Communications Cloud Native Core Network Function Cloud Native Environment 22.1.0Oracle Communications Cloud Native Core Network Repository Function 1.15.0Oracle Communications Cloud Native Core Network Repository Function 22.1.0Oracle Financial Services Analytical Applications Infrastructure 8.1.1.0Oracle Financial Services Analytical Applications Infrastructure 8.1.2.0Oracle Financial Services Enterprise Case Management 8.1.2.0Oracle Product Lifecycle Analytics 3.6.1.0Oracle Retail Xstore Point Of Service 21.0.0Oracle Banking Origination 14.5Oracle Banking Electronic Data Exchange For Corporates 14.5Oracle Banking Branch 14.5Oracle Communications Cloud Native Core Policy 22.1.3Oracle Communications Cloud Native Core Network Function Cloud Native Environment 22.1.2
7.5
CVSSv3
CVE-2022-23308
valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes....
Xmlsoft Libxml2Fedoraproject Fedora 34Debian Debian Linux 9.0Apple Mac Os X 10.15.7Apple Iphone OsApple WatchosApple TvosApple IpadosApple MacosApple Mac Os XNetapp Snapdrive -Netapp Snapmanager -Netapp Ontap Select Deploy Administration Utility -Netapp Clustered Data Ontap -Netapp Smi-s Provider -Netapp Clustered Data Ontap Antivirus Connector -Netapp Solidfire \\& Hci Management Node -Netapp Active Iq Unified Manager -Netapp Manageability Software Development Kit -Netapp Solidfire\\, Enterprise Sds \\& Hci Storage Node -Netapp Bootstrap Os -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -Netapp H500e Firmware -Netapp H700e Firmware -Netapp H410s Firmware -Netapp H410c Firmware -Oracle Zfs Storage Appliance Kit 8.8Oracle Communications Cloud Native Core Network Function Cloud Native Environment 22.1.0Oracle Communications Cloud Native Core Network Repository Function 22.2.0Oracle Communications Cloud Native Core Network Repository Function 22.1.2Oracle Communications Cloud Native Core Unified Data Repository 22.2.0Oracle Communications Cloud Native Core Binding Support Function 22.2.0Oracle Communications Cloud Native Core Network Slice Selection Function 22.1.1Oracle Mysql Workbench
7.5
CVSSv3
CVE-2020-36518
jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects....
Fasterxml Jackson-databindOracle Weblogic Server 12.2.1.3.0Oracle Commerce Platform 11.3.1Oracle Utilities Framework 4.3.0.5.0Oracle Utilities Framework 4.3.0.6.0Oracle Utilities Framework 4.4.0.0.0Oracle Weblogic Server 12.2.1.4.0Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Primavera Unifier 19.12Oracle Sd-wan Edge 9.0Oracle Weblogic Server 14.1.1.0.0Oracle Coherence 14.1.1.0.0Oracle Utilities Framework 4.4.0.2.0Oracle Global Lifecycle Management Nextgen Oui Framework 13.9.4.2.2Oracle Primavera Unifier 20.12Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Primavera GatewayOracle Utilities Framework 4.4.0.3.0Oracle Sd-wan Edge 9.1Oracle Commerce Platform 11.3.0Oracle Commerce Platform 11.3.2Oracle Primavera Unifier 21.12Oracle Financial Services Trade-based Anti Money Laundering 8.0.7Oracle Financial Services Trade-based Anti Money Laundering 8.0.8Oracle Financial Services Behavior Detection Platform 8.0.8Oracle Big Data Spatial And GraphOracle Financial Services Enterprise Case Management 8.0.8.1Oracle Financial Services Enterprise Case Management 8.0.7.1Oracle Financial Services Enterprise Case Management 8.0.8.0Oracle Communications Cloud Native Core Console 1.9.0Oracle Communications Cloud Native Core Network Slice Selection Function 22.1.0Oracle Financial Services Analytical Applications Infrastructure 8.1.2.0Oracle Financial Services Analytical Applications Infrastructure 8.1.1.0Oracle Financial Services Enterprise Case Management 8.0.7.2Oracle Communications Billing And Revenue ManagementOracle Communications Cloud Native Core Binding Support Function 22.1.3Oracle Financial Services Crime And Compliance Management Studio 8.0.8.2.0Oracle Financial Services Crime And Compliance Management Studio 8.0.8.3.0Oracle Communications Cloud Native Core Network Repository Function 22.2.0Oracle Communications Cloud Native Core Security Edge Protection Proxy 22.1.1Oracle Communications Cloud Native Core Network Repository Function 22.1.2Oracle Communications Cloud Native Core Unified Data Repository 22.2.0Oracle Utilities Framework 4.4.0.5.0Oracle Global Lifecycle Management Nextgen Oui FrameworkOracle Financial Services Analytical Applications Infrastructure 8.1.2.1Oracle Financial Services Enterprise Case ManagementOracle Retail Sales Audit 15.0.3.1Oracle Health Sciences Empirica Signal 9.1.0.5.2Oracle Spatial StudioOracle Primavera Unifier 18.0Oracle Financial Services Behavior Detection Platform 8.0.7.0.0Oracle Financial Services Behavior Detection PlatformOracle Primavera P6 Enterprise Project Portfolio ManagementOracle Primavera UnifierOracle Financial Services Analytical Applications InfrastructureOracle Communications Cloud Native Core Service Communication Proxy 22.2.0Oracle Communications Cloud Native Core Network Slice Selection Function 22.1.1Oracle Global Lifecycle Management OpatchOracle Graph Server And ClientDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Netapp Snap Creator Framework -Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp Active Iq Unified Manager -Netapp Cloud Insights Acquisition Unit -
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversalCVE-2023-21068CVE-2023-21077unspecifiedCVE-2023-21070CVE-2023-21016file upload
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook