What’s Vulnerable › Products

Oracle Communications Cloud Native Core Policy vulnerabilities

125 known vulnerabilities, 3 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your Oracle Communications Cloud Native Core Policy version is affected

Exploited Oracle Communications Cloud Native Core Policy vulnerabilities

• CVE-2021-39144 — XStream Remote Code Execution Vulnerability
• CVE-2022-22963 — VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability
• CVE-2022-22965 — Spring Framework JDK 9+ Remote Code Execution Vulnerability

Latest Oracle Communications Cloud Native Core Policy vulnerabilities

• CVE-2023-21971 — (CVSS 5.3)
• CVE-2023-21824 — (CVSS 4.4)
• CVE-2022-22965 — Spring Framework JDK 9+ Remote Code Execution Vulnerability (CVSS 9.8) — exploited
• CVE-2022-22963 — VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability (CVSS 9.8) — exploited
• CVE-2022-0322 — (CVSS 5.5)
• CVE-2021-4203 — (CVSS 6.8)
• CVE-2022-0002 — (CVSS 6.5)
• CVE-2022-0001 — (CVSS 6.5)
• CVE-2021-3737 — (CVSS 7.5)
• CVE-2021-3744 — (CVSS 5.5)
• CVE-2021-3743 — (CVSS 7.1)
• CVE-2021-4002 — (CVSS 4.4)
• CVE-2021-3772 — (CVSS 6.5)
• CVE-2022-25636 — (CVSS 7.8)
• CVE-2021-20322 — (CVSS 7.4)
• CVE-2021-3773 — (CVSS 9.8)
• CVE-2021-3752 — (CVSS 7.1)
• CVE-2022-0286 — (CVSS 5.5)
• CVE-2022-23181 — Local privilege escalation with FileStore (CVSS 7.0)
• CVE-2021-4083 — (CVSS 7.0)
• CVE-2021-42392 — (CVSS 9.8)
• CVE-2021-22569 — Denial of Service of protobuf-java parsing procedure (CVSS 5.5)
• CVE-2021-45486 — (CVSS 3.5)
• CVE-2021-45485 — (CVSS 7.5)
• CVE-2021-45105 — Apache Log4j2 does not always protect from infinite recursion in lookup evaluation (CVSS 5.9)