Vulnerabilidades de oracle communications cloud native core network function cloud native environment (CVE)

Registros CVE publicados para oracle communications cloud native core network function cloud native environment, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

3 resultados
9.8Crítica
CVE-2022-22965 KEV

Spring Framework JDK 9+ Remote Code Execution Vulnerability

Spring Framework

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot…

100%EPSS
10.0Crítica
CVE-2022-22947 KEV

VMware Spring Cloud Gateway Code Injection Vulnerability

Spring Cloud Gateway

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted request that could al…

98%EPSS