CC
Product
Communications Cloud Native Core Unified Data Repository
On CISA KEVExploited in the wild
42
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 28Medium 8Low 0
Watch
Add Communications Cloud Native Core Unified Data Repository to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-22965 In wildKEV | 9.8 | Apr 1 | Spring Framework JDK 9+ Remote Code Execution Vulnerability Affected: 1.15.0; 22.1.0 |
| CVE-2022-22963 In wildKEV | 9.8 | Apr 1 | VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability Affected: 1.15.0; 22.1.0 |
| CVE-2022-25845 | 9.8 | Jun 10 | The package com.alibaba:fastjson before 1.2.83 are vulnerable to Deserialization of Untrusted Data by bypassing the default autoType shutdown restrictions, which is possible under… Affected: 22.2.0 |
| CVE-2022-23219 | 9.8 | Jan 14 | The deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its hostname argument on the stack without validating… Affected: 22.2.0 |
| CVE-2022-23218 | 9.8 | Jan 14 | The deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its path argument on the stack without validating… Affected: 22.2.0 |
| CVE-2021-3711 | 9.8 | Aug 24 | SM2 Decryption Buffer Overflow Affected: 1.15.0 |
Showing 6