CC
Product
Communications Cloud Native Core Network Function Cloud Native Environment
On CISA KEVExploited in the wild
46
CVEs
3
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 11High 21Medium 13Low 1
Watch
Add Communications Cloud Native Core Network Function Cloud Native Environment to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-7017 | 6.7 | Jul 27 | In Kibana versions before 6.8.11 and 7.8.1 the region map visualization in contains a stored XSS flaw Affected: 1.7.0 |
| CVE-2020-26137 | 6.5 | Sep 30 | urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of… Affected: 22.2.0 |
| CVE-2020-24977 | 6.5 | Sep 3 | GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c Affected: 1.10.0 |
| CVE-2019-10219 | 6.1 | Nov 8 | A vulnerability was found in Hibernate-Validator Affected: 1.9.0 |
| CVE-2021-45105 | 5.9 | Dec 18 | Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups Affected: 1.10.0 |
| CVE-2021-22947 | 5.9 | Sep 29 | When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can respond and send back multiple… Affected: 1.10.0 |
| CVE-2021-3537 | 5.9 | May 14 | A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference Affected: 1.10.0 |
| CVE-2020-25659 | 5.9 | Jan 11 | python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 ciphertext Affected: 1.10.0 |
| CVE-2020-1971 | 5.9 | Dec 8 | The X.509 GeneralName type is a generic type for representing different types of names Affected: 1.10.0 |
| CVE-2021-3572 | 5.7 | Nov 10 | A flaw was found in python-pip in the way it handled Unicode separators in git references Affected: 1.10.0; 22.1.0 |
| CVE-2021-22897 | 5.3 | Jun 11 | curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for CURLOPT_SSL_CIPHER_LIST when libcurl is built to use the… Affected: 1.10.0 |
| CVE-2020-7016 | 4.8 | Jul 27 | Kibana versions before 6.8.11 and 7.8.1 contain a denial of service (DoS) flaw in Timelion Affected: 1.7.0 |
| CVE-2021-3448 | 4.0 | Apr 8 | A flaw was found in dnsmasq in versions before 2.85 Affected: 1.9.0 |
Showing 13