Vulnerabilities (CVE)

Filtered by vendor Oracle Subscribe

Filtered by product Communications Cloud Native Core Security Edge Protection Proxy

Total 24 CVE

CVE	Vendors	Products	Updated	CVSS v2	CVSS v3
CVE-2021-22946	8 Apple, Debian, Fedoraproject and 5 more	37 Macos, Debian Linux, Fedora and 34 more	2024-11-21	5.0 MEDIUM	7.5 HIGH
A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server (`--ssl-reqd` on the command line or`CURLOPT_USE_SSL` set to `CURLUSESSL_CONTROL` or `CURLUSESSL_ALL` withlibcurl). This requirement could be bypassed if the server would return a properly crafted but perfectly legitimate response.This flaw would then make curl silently continue its operations withoutTLS contrary to the instructions and expectations, exposing possibly sensitive data in clear text over the network.
CVE-2021-22118	3 Netapp, Oracle, Vmware	32 Hci, Management Services For Element Software, Commerce Guided Search and 29 more	2024-11-21	4.6 MEDIUM	7.8 HIGH
In Spring Framework, versions 5.2.x prior to 5.2.15 and versions 5.3.x prior to 5.3.7, a WebFlux application is vulnerable to a privilege escalation: by (re)creating the temporary storage directory, a locally authenticated malicious user can read or modify files that have been uploaded to the WebFlux application, or overwrite arbitrary files with multipart request data.
CVE-2020-14340	2 Oracle, Redhat	14 Communications Cloud Native Core Console, Communications Cloud Native Core Network Repository Function, Communications Cloud Native Core Policy and 11 more	2024-11-21	4.3 MEDIUM	5.9 MEDIUM
A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles. It may allow the attacker to cause a denial of service. It affects XNIO versions 3.6.0.Beta1 through 3.8.1.Final.
CVE-2019-17195	3 Apache, Connect2id, Oracle	15 Hadoop, Nimbus Jose\+jwt, Communications Cloud Native Core Security Edge Protection Proxy and 12 more	2024-11-21	6.8 MEDIUM	9.8 CRITICAL
Connect2id Nimbus JOSE+JWT before v7.9 can throw various uncaught exceptions while parsing a JWT, which could result in an application crash (potential information disclosure) or a potential authentication bypass.