Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

oracle communications cloud native core unified data repository 1.15.0 vulnerabilities and exploits

(subscribe to this query)
5.5
CVSSv3

CVE-2021-28168

Eclipse Jersey 2.28 to 2.33 and Eclipse Jersey 3.0.0 to 3.0.1 contains a local information disclosure vulnerability. This is due to the use of the File.createTempFile which creates a file inside of the system temporary directory with the permissions: -rw-r--r--. Thus the contents...
Eclipse JerseyOracle Communications Cloud Native Core Policy 1.15.0Oracle Communications Cloud Native Core Unified Data Repository 1.15.0
5.9
CVSSv3

CVE-2020-14340

A vulnerability exists in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles. It may allow the malicious user to cause a denial of service. It affects XNIO versions 3.6.0.Beta1 up to and including 3.8.1.Final.
Redhat XnioRedhat Xnio 3.6.0Redhat Jboss Brms 5Redhat Jboss Brms 6Redhat Jboss Data Grid 6.0.0Redhat Jboss Data Grid 7.0.0Redhat Jboss Data Virtualization 6.0.0Redhat Jboss Enterprise Application Platform 5.0.0Redhat Jboss Enterprise Application Platform 6.0.0Redhat Jboss Fuse 6.0.0Redhat Jboss Fuse 7.0.0Redhat Jboss Operations Network 3.0
9.8
CVSSv3

CVE-2022-22963

In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.
Vmware Spring Cloud FunctionOracle Banking Branch 14.5Oracle Banking Cash Management 14.5Oracle Banking Corporate Lending Process Management 14.5Oracle Banking Credit Facilities Process Management 14.5Oracle Banking Electronic Data Exchange For Corporates 14.5Oracle Banking Liquidity Management 14.2Oracle Banking Liquidity Management 14.5Oracle Banking Origination 14.5Oracle Banking Supply Chain Finance 14.5Oracle Banking Trade Finance Process Management 14.5Oracle Banking Virtual Account Management 14.5
6.5
CVSSv3

CVE-2021-43797

Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. Netty prior to version 4.1.71.Final skips control chars when they are present at the beginning / end of the header name. It s...
Netty NettyQuarkus QuarkusNetapp Oncommand Workflow Automation -Netapp Snapcenter -Oracle Banking Deposits And Lines Of Credit Servicing 2.7Oracle Banking Party Management 2.7.0Oracle Banking Platform 2.6.2Oracle Coherence 12.2.1.4.0Oracle Coherence 14.1.1.0.0Oracle Communications Cloud Native Core Binding Support Function 1.11.0Oracle Communications Cloud Native Core Network Slice Selection Function 1.8.0Oracle Communications Cloud Native Core Policy 1.15.0
8.1
CVSSv3

CVE-2021-22901

curl 7.75.0 up to and including 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when a TLS 1.3 session ticket arrives over a connection. A malicious server can use this in rare unfortunate circumstances to potentially reach remote c...
Haxx CurlOracle Communications Cloud Native Core Binding Support Function 1.11.0Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0Oracle Communications Cloud Native Core Network Repository Function 1.15.0Oracle Communications Cloud Native Core Network Repository Function 1.15.1Oracle Communications Cloud Native Core Network Slice Selection Function 1.8.0Oracle Communications Cloud Native Core Service Communication Proxy 1.15.0Oracle EssbaseOracle Mysql ServerNetapp Active Iq Unified Manager -Netapp Cloud Backup -Netapp Oncommand Insight -
7.5
CVSSv3

CVE-2021-37136

The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression). All users of Bzip2Decoder are affected. The malicious input can trigger an OOME and so a DoS attack
Netty NettyQuarkus QuarkusOracle Banking ApisOracle Banking Apis 19.1Oracle Banking Apis 19.2Oracle Banking Apis 20.1Oracle Banking Apis 21.1Oracle Banking Digital Experience 18.1Oracle Banking Digital Experience 18.2Oracle Banking Digital Experience 18.3Oracle Banking Digital Experience 19.1Oracle Banking Digital Experience 19.2
9.8
CVSSv3

CVE-2022-22965

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e....
Vmware Spring FrameworkCisco Cx Cloud AgentOracle Communications Cloud Native Core Automated Test Suite 1.9.0Oracle Communications Cloud Native Core Automated Test Suite 22.1.0Oracle Communications Cloud Native Core Console 1.9.0Oracle Communications Cloud Native Core Console 22.1.0Oracle Communications Cloud Native Core Network Exposure Function 22.1.0Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0Oracle Communications Cloud Native Core Network Function Cloud Native Environment 22.1.0Oracle Communications Cloud Native Core Network Repository Function 1.15.0Oracle Communications Cloud Native Core Network Repository Function 22.1.0Oracle Communications Cloud Native Core Network Slice Selection Function 1.8.0
7.4
CVSSv3

CVE-2021-3712

ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated...
Openssl OpensslDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Netapp Clustered Data Ontap -Netapp Clustered Data Ontap Antivirus Connector -Netapp E-series Santricity Os ControllerNetapp Hci Management Node -Netapp Manageability Software Development Kit -Netapp Santricity Smi-s Provider -Netapp Solidfire -Netapp Storage Encryption -
9.8
CVSSv3

CVE-2021-3711

In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, the "outlen" paramete...
Openssl OpensslDebian Debian Linux 10.0Debian Debian Linux 11.0Netapp Active Iq Unified Manager -Netapp Clustered Data Ontap -Netapp Clustered Data Ontap Antivirus Connector -Netapp E-series Santricity Os ControllerNetapp Hci Management Node -Netapp Manageability Software Development Kit -Netapp Oncommand Insight -Netapp Oncommand Workflow Automation -Netapp Santricity Smi-s Provider -
5.9
CVSSv3

CVE-2021-45105

Apache Log4j2 versions 2.0-alpha1 up to and including 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted strin...
Apache Log4jNetapp Cloud Manager -Debian Debian Linux 10.0Debian Debian Linux 11.0Sonicwall Email SecuritySonicwall Network Security ManagerSonicwall Web Application FirewallSonicwall 6bk1602-0aa12-0tp0 FirmwareSonicwall 6bk1602-0aa22-0tp0 FirmwareSonicwall 6bk1602-0aa32-0tp0 FirmwareSonicwall 6bk1602-0aa42-0tp0 FirmwareSonicwall 6bk1602-0aa52-0tp0 Firmware
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
localIMAPCVE-2024-8504CVE-2024-42327CVE-2024-11904CVE-2024-47107CVE-2024-53143XML injectionCVE-2024-54750
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook