CC
Product
Communications Cloud Native Core Policy
On CISA KEVExploited in the wild
123
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 66Medium 46Low 4
Watch
Add Communications Cloud Native Core Policy to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-22965 In wildKEV | 9.8 | Apr 1 | Spring Framework JDK 9+ Remote Code Execution Vulnerability Affected: 1.15.0; 22.1.0 |
| CVE-2022-22963 In wildKEV | 9.8 | Apr 1 | VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability Affected: 1.15.0; 22.1.0; 22.1.3 |
| CVE-2021-3773 | 9.8 | Feb 16 | A flaw in netfilter could allow a network-connected attacker to infer openvpn connection endpoint information for further use in traditional network attacks Affected: 22.2.0 |
| CVE-2021-42392 | 9.8 | Jan 10 | The org.h2.util.JdbcUtils.getConnection method of the H2 database takes as parameters the class name of the driver and URL of the database Affected: 1.15.0 |
| CVE-2021-23440 | 9.8 | Sep 12 | This affects the package set-value before <2.0.1, >=3.0.0 <4.0.1 Affected: 1.14.0 |
| CVE-2021-3520 | 9.8 | Jun 2 | There's a flaw in lz4 Affected: 1.14.0 |
| CVE-2021-32827 | 9.6 | Aug 16 | MockServer is open source software which enables easy mocking of any system you integrate with via HTTP or HTTPS Affected: 1.14.0 |
Showing 7