CC
Product
Communications Cloud Native Core Security Edge Protection Proxy
On CISA KEVExploited in the wild
26
CVEs
3
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 6High 11Medium 9Low 0
Watch
Add Communications Cloud Native Core Security Edge Protection Proxy to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-43797 | 6.5 | Dec 9 | HTTP fails to validate against control chars in header names which may lead to HTTP request smuggling Affected: 1.7.0 |
| CVE-2019-10219 | 6.1 | Nov 8 | A vulnerability was found in Hibernate-Validator Affected: 1.5.0; 1.6.0; 1.15.0 |
| CVE-2021-45105 | 5.9 | Dec 18 | Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups Affected: 1.7.0 |
| CVE-2021-2471 | 5.9 | Oct 20 | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J) Affected: 1.7.0 |
| CVE-2021-22947 | 5.9 | Sep 29 | When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can respond and send back multiple… Affected: 22.1.1 |
| CVE-2021-33880 | 5.9 | Jun 6 | The aaugustin websockets library before 9.1 for Python has an Observable Timing Discrepancy on servers when HTTP Basic Authentication is enabled with… Affected: 1.5.0 |
| CVE-2020-14340 | 5.9 | Jun 2 | A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles Affected: 1.15.0 |
| CVE-2022-22946 | 5.5 | Mar 4 | In spring cloud gateway versions prior to 3.1.1+ , applications that are configured to enable HTTP2 and no key store or trusted certificates are set will be configured to use an… Affected: 22.1.1 |
| CVE-2021-34429 | 5.3 | Jul 15 | For Eclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5, URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or… Affected: 1.5.0 |
Showing 9