oracle communications cloud native core policy

Name: oracle communications cloud native core policy
Brand: oracle

productUS

cpe:2.3:a:oracle:communications_cloud_native_core_policy:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

12critical76high60medium4low

updated 2026-10-28

vulnerabilities (173)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-44487US	high7.5OT critical	100.0% (100th)	KEV	no fix	2023-10-10	—
CVE-2022-22963US	critical9.8OT critical	99.9% (100th)	KEV	no fix	2022-04-01	3 versions
CVE-2023-46604US	critical9.8OT critical	99.9% (100th)	KEV	no fix	2023-10-27	—
CVE-2022-22965US	critical9.8OT critical	99.6% (100th)	KEV	no fix	2022-04-01	2 versions
CVE-2021-39144US	high8.5OT critical	98.1% (100th)	KEV	no fix	2021-08-23	= 1.14.0
CVE-2021-45105US	medium5.9	100.0% (100th)	Exploit	no fix	2021-12-18	= 1.15.0
CVE-2023-48795US	medium5.9OT high	93.5% (100th)	Exploit	no fix	2023-12-18	—
CVE-2024-27316US	high7.5	91.3% (100th)	Exploit	no fix	2024-04-04	—
CVE-2024-2961US	—	88.3% (100th)	Exploit	no fix	2024-04-17	—
CVE-2020-5398US	high7.5OT high	88.3% (100th)	Exploit	no fix	2020-01-17	= 1.5.0
CVE-2020-13935US	high7.5	86.6% (100th)	Exploit	no fix	2020-07-14	= 1.14.0
CVE-2019-3799US	medium6.5	85.3% (100th)	Exploit	no fix	2019-05-06	= 1.15.0
CVE-2021-42392US	critical9.8	83.2% (100th)	Exploit	no fix	2022-01-10	= 1.15.0
CVE-2023-38408US	critical9.8	79.7% (100th)	Exploit	no fix	2023-07-20	—
CVE-2020-9484US	high7.0	55.5% (99th)	Exploit	no fix	2020-05-20	= 1.14.0
CVE-2021-28165US	high7.5	53.9% (99th)	Exploit	no fix	2021-04-01	= 1.14.0
CVE-2021-23840US	high7.5	50.7% (99th)	Exploit	no fix	2021-02-16	= 1.15.0
CVE-2020-17527US	high7.5	24.6% (98th)	Exploit	no fix	2020-12-03	= 1.14.0
CVE-2024-24549US	—	23.1% (98th)	Exploit	no fix	2024-03-13	—
CVE-2021-23337US	high7.2	21.3% (98th)	Exploit	no fix	2021-02-15	= 1.11.0
CVE-2020-36179US	high8.1	17.1% (97th)	Exploit	no fix	2021-01-07	= 1.14.0
CVE-2021-39141US	high8.5	16.1% (97th)	Exploit	no fix	2021-08-23	= 1.14.0
CVE-2020-35728US	high8.1	12.5% (96th)	Exploit	no fix	2020-12-27	= 1.14.0
CVE-2021-29425US	medium4.8	10.5% (96th)	Exploit	no fix	2021-04-13	= 1.14.0
CVE-2020-36188US	high8.1	8.79% (95th)	Exploit	no fix	2021-01-06	= 1.14.0
CVE-2020-8554US	medium5.0	8.72% (95th)	Exploit	no fix	2021-01-21	= 1.15.0
CVE-2020-36184US	high8.1	8.36% (95th)	Exploit	no fix	2021-01-06	= 1.14.0
CVE-2021-2471US	high7.9OT high	7.49% (94th)	Exploit	no fix	2021-10-20	= 1.15.0
CVE-2021-23841US	medium5.9OT elevated	7.41% (94th)	Exploit	no fix	2021-02-16	= 1.15.0
CVE-2021-22119US	high7.5OT elevated	6.00% (93rd)	Exploit	no fix	2021-06-29	= 1.14.0
CVE-2021-3773US	critical9.8	5.28% (93rd)	Exploit	no fix	2022-02-16	= 22.2.0
CVE-2020-8203US	high7.4	5.21% (92nd)	Exploit	no fix	2020-07-15	= 1.11.0
CVE-2020-36180US	high8.1	4.09% (91st)	Exploit	no fix	2021-01-07	= 1.14.0
CVE-2021-45485US	high7.5OT elevated	3.82% (90th)	Exploit	no fix	2021-12-25	= 22.2.0
CVE-2021-27568US	medium5.9	2.90% (87th)	Exploit	no fix	2021-02-23	= 1.14.0
CVE-2022-25636US	high7.8	2.61% (85th)	Exploit	no fix	2022-02-24	= 22.2.0
CVE-2019-18276US	high7.8	2.61% (85th)	Exploit	no fix	2019-11-28	= 1.14.0
CVE-2019-10219US	medium6.1	2.16% (82nd)	Exploit	no fix	2019-11-08	= 1.14.0
CVE-2021-3572US	medium5.7	1.83% (79th)	Exploit	no fix	2021-11-10	2 versions
CVE-2021-22569US	medium5.5	1.67% (77th)	Exploit	no fix	2022-01-10	= 1.15.0
CVE-2023-21971US	—	1.48% (74th)	Exploit	no fix	2023-04-18	2 versions
CVE-2023-3635US	high7.5	1.25% (69th)	Exploit	no fix	2023-07-12	—
CVE-2024-22262US	—	1.19% (68th)	Exploit	no fix	2024-04-16	—
CVE-2024-34064US	—	0.98% (62nd)	Exploit	no fix	2024-05-06	—
CVE-2024-26308US	medium5.5	0.90% (59th)	Exploit	no fix	2024-02-19	—
CVE-2022-0001US	medium6.5	0.51% (43rd)	Exploit	no fix	2022-03-11	= 22.2.0
CVE-2022-2068US	high7.3	96.4% (100th)	—	no fix	2022-06-21	—
CVE-2024-28182US	—	85.0% (100th)	—	no fix	2024-04-04	—
CVE-2021-28169US	medium5.3	78.5% (100th)	—	no fix	2021-06-09	= 1.14.0
CVE-2021-33037US	medium5.3	74.7% (99th)	—	no fix	2021-07-12	= 1.14.0

showing 50 of 173

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-502Deserialization of Untrusted Data33 CVEs
CWE-400Uncontrolled Resource Consumption24 CVEs
CWE-20Improper Input Validation20 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor12 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type10 CVEs
CWE-770Allocation of Resources Without Limits or Throttling10 CVEs
CWE-787Out-of-bounds Write10 CVEs
CWE-416Use After Free9 CVEs

sources (2)

Which sources assert this record, and when.

USNVD / CVE125 CVEs
NLNCSC-NL (CSAF)48 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan