Vulnerabilidades de oracle communications cloud native core network slice selection function (CVE)

Registros CVE publicados para oracle communications cloud native core network slice selection function, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

4 resultados
9.8Crítica
CVE-2022-22965 KEV

Spring Framework JDK 9+ Remote Code Execution Vulnerability

Spring Framework

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot…

100%EPSS
10.0Crítica
CVE-2022-22947 KEV

VMware Spring Cloud Gateway Code Injection Vulnerability

Spring Cloud Gateway

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted request that could al…

98%EPSS
3.3Baja
CVE-2020-8908

Temp directory permission issue in Guava

Google LLC Guava

A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com.google.common.io.Files.createTempDir(). By default, on un…