CC
Product
Communications Cloud Native Core Automated Test Suite
On CISA KEVExploited in the wild
50
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 22Medium 24Low 0
Watch
Add Communications Cloud Native Core Automated Test Suite to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-39144 In wildKEV | 8.5 | Aug 23 | XStream is vulnerable to a Remote Command Execution attack Affected: 1.9.0 |
| CVE-2021-39139 | 8.8 | Aug 23 | XStream is vulnerable to an Arbitrary Code Execution attack Affected: 1.9.0 |
| CVE-2019-10384 | 8.8 | Aug 28 | Jenkins 2.191 and earlier, LTS 2.176.2 and earlier allowed users to obtain CSRF tokens without an associated web session ID, resulting in CSRF tokens that did not expire and could… Affected: 1.9.0 |
| CVE-2018-1999001 | 8.8 | Jul 23 | A unauthorized modification of configuration vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in User.java that allows attackers to provide crafted login… Affected: 1.9.0 |
| CVE-2021-39150 | 8.5 | Aug 23 | A Server-Side Forgery Request vulnerability in XStream via PriorityQueue unmarshaling Affected: 1.9.0 |
| CVE-2021-39152 | 8.5 | Aug 23 | A Server-Side Forgery Request vulnerability in XStream via HashMap unmarshaling Affected: 1.9.0 |
| CVE-2021-39149 | 8.5 | Aug 23 | XStream is vulnerable to an Arbitrary Code Execution attack Affected: 1.9.0 |
| CVE-2021-39148 | 8.5 | Aug 23 | XStream is vulnerable to an Arbitrary Code Execution attack Affected: 1.9.0 |
| CVE-2021-39147 | 8.5 | Aug 23 | XStream is vulnerable to an Arbitrary Code Execution attack Affected: 1.9.0 |
| CVE-2021-39146 | 8.5 | Aug 23 | XStream is vulnerable to an Arbitrary Code Execution attack Affected: 1.9.0 |
| CVE-2021-39145 | 8.5 | Aug 23 | XStream is vulnerable to an Arbitrary Code Execution attack Affected: 1.9.0 |
| CVE-2021-39141 | 8.5 | Aug 23 | XStream is vulnerable to an Arbitrary Code Execution attack Affected: 1.9.0 |
| CVE-2021-39153 | 8.5 | Aug 23 | XStream is vulnerable to an Arbitrary Code Execution attack Affected: 1.9.0 |
| CVE-2021-39151 | 8.5 | Aug 23 | XStream is vulnerable to an Arbitrary Code Execution attack Affected: 1.9.0 |
| CVE-2021-39154 | 8.5 | Aug 23 | XStream is vulnerable to an Arbitrary Code Execution attack Affected: 1.9.0 |
| CVE-2019-1003049 | 8.1 | Apr 10 | Users who cached their CLI authentication before Jenkins was updated to 2.150.2 and newer, or 2.160 and newer, would remain authenticated in Jenkins 2.171 and earlier and Jenkins… Affected: 1.9.0 |
| CVE-2018-1000194 | 8.1 | Jun 5 | A path traversal vulnerability exists in Jenkins 2.120 and older, LTS 2.107.2 and older in FilePath.java, SoloFilePathFilter.java that allows malicious agents to read and write… Affected: 1.9.0 |
| CVE-2021-43859 | 7.5 | Feb 1 | XStream is an open source java library to serialize objects to XML and back again Affected: 1.9.0 |
| CVE-2021-35516 | 7.5 | Jul 13 | When reading a specially crafted 7Z archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs Affected: 1.8.0 |
| CVE-2021-35515 | 7.5 | Jul 13 | When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop Affected: 1.8.0 |
| CVE-2021-36090 | 7.5 | Jul 13 | Apache Commons Compress 1.0 to 1.20 denial of service vulnerability Affected: 1.8.0 |
| CVE-2018-1999002 | 7.5 | Jul 23 | A arbitrary file read vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in the Stapler web framework's org/kohsuke/stapler/Stapler.java that allows attackers… Affected: 1.9.0 |
Showing 22