Oracle Communications Cloud Native Core Console vulnerabilities

23 known vulnerabilities, 3 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Exploited Oracle Communications Cloud Native Core Console vulnerabilities

CVE-2022-22963 — VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability
CVE-2022-22947 — VMware Spring Cloud Gateway Code Injection Vulnerability
CVE-2022-22965 — Spring Framework JDK 9+ Remote Code Execution Vulnerability

CVE-2022-22965 — Spring Framework JDK 9+ Remote Code Execution Vulnerability (CVSS 9.8) — exploited
CVE-2022-22963 — VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability (CVSS 9.8) — exploited
CVE-2020-36518 — (CVSS 7.5)
CVE-2022-22946 — (CVSS 5.5)
CVE-2022-22947 — VMware Spring Cloud Gateway Code Injection Vulnerability (CVSS 10.0) — exploited
CVE-2022-24407 — (CVSS 8.8)
CVE-2022-23221 — (CVSS 9.8)
CVE-2021-22569 — Denial of Service of protobuf-java parsing procedure (CVSS 5.5)
CVE-2021-22060 — (CVSS 4.3)
CVE-2021-45105 — Apache Log4j2 does not always protect from infinite recursion in lookup evaluation (CVSS 5.9)
CVE-2021-41973 — Apache MINA HTTP listener DOS (CVSS 6.5)
CVE-2021-22096 — (CVSS 4.3)
CVE-2021-2471 — (CVSS 7.9)
CVE-2021-22947 — (CVSS 5.9)
CVE-2021-22946 — (CVSS 7.5)
CVE-2021-3712 — Read buffer overruns processing ASN.1 strings (CVSS 7.4)
CVE-2021-30129 — DoS/OOM leak vulnerability in Apache Mina SSHD Server (CVSS 6.5)
CVE-2020-14340 — (CVSS 5.9)
CVE-2021-21409 — Possible request smuggling in HTTP/2 due missing validation of content-length (CVSS 5.9)
CVE-2021-20289 — (CVSS 5.3)
CVE-2020-25638 — (CVSS 7.4)
CVE-2019-10219 — (CVSS 6.1)
CVE-2019-10086 — (CVSS 7.3)