Oracle Corporation SD-WAN Edge vulnerabilities

25 known vulnerabilities, 2 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Exploited Oracle Corporation SD-WAN Edge vulnerabilities

CVE-2022-22963 — VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability
CVE-2022-22965 — Spring Framework JDK 9+ Remote Code Execution Vulnerability

CVE-2022-22965 — Spring Framework JDK 9+ Remote Code Execution Vulnerability (CVSS 9.8) — exploited
CVE-2022-22963 — VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability (CVSS 9.8) — exploited
CVE-2020-36518 — Deeply nested json in jackson-databind (CVSS 7.5)
CVE-2021-42340 — DoS via memory leak with WebSocket connections (CVSS 7.5)
CVE-2021-33037 — Incorrect Transfer-Encoding handling with HTTP/1.0 (CVSS 5.3)
CVE-2020-35491 — Serialization gadgets exploit in jackson-databind (CVSS 8.1)
CVE-2020-17527 — Apache Tomcat: Request header mix-up between HTTP/2 streams (CVSS 7.5)
CVE-2020-25649 — XML External Entity (XXE) Injection in Jackson Databind (CVSS 7.5)
CVE-2020-13943 — (CVSS 4.3)
CVE-2020-24394 — (CVSS 7.1)
CVE-2020-16166 — (CVSS 3.7)
CVE-2020-14606 — (CVSS 10.0)
CVE-2020-12723 — (CVSS 7.5)
CVE-2020-10543 — (CVSS 8.2)
CVE-2020-12771 — (CVSS 5.5)
CVE-2019-5108 — (CVSS 6.5)
CVE-2019-19922 — (CVSS 5.5)
CVE-2019-19535 — (CVSS 4.6)
CVE-2019-19063 — (CVSS 4.6)
CVE-2019-19052 — (CVSS 7.5)
CVE-2019-10219 — (CVSS 6.1)
CVE-2019-14821 — (CVSS 8.8)
CVE-2019-15218 — (CVSS 4.6)
CVE-2019-1010238 — (CVSS 9.8)
CVE-2019-3900 — (CVSS 7.7)