CC
Product
Communications Cloud Native Core Binding Support Function
On CISA KEVExploited in the wild
73
CVEs
3
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 6High 38Medium 26Low 3
Watch
Add Communications Cloud Native Core Binding Support Function to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-22947 In wildKEV | 10.0 | Mar 3 | VMware Spring Cloud Gateway Code Injection Vulnerability Affected: 1.11.0; 22.1.3 |
| CVE-2022-22965 In wildKEV | 9.8 | Apr 1 | Spring Framework JDK 9+ Remote Code Execution Vulnerability Affected: 22.1.3 |
| CVE-2021-3773 | 9.8 | Feb 16 | A flaw in netfilter could allow a network-connected attacker to infer openvpn connection endpoint information for further use in traditional network attacks Affected: 22.1.3 |
| CVE-2022-23219 | 9.8 | Jan 14 | The deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its hostname argument on the stack without validating… Affected: 22.1.3 |
| CVE-2021-43527 | 9.8 | Dec 8 | NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures Affected: 1.11.0 |
| CVE-2021-29921 | 9.8 | May 6 | In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string Affected: 1.11.0 |
Showing 6