oracle communications cloud native core security edge protection proxy

Name: oracle communications cloud native core security edge protection proxy
Brand: oracle

productUS

cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

6critical12high8medium0low

updated 2026-10-28

vulnerabilities (26)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-22963US	critical9.8OT critical	99.9% (100th)	KEV	no fix	2022-04-01	2 versions
CVE-2022-22965US	critical9.8OT critical	99.6% (100th)	KEV	no fix	2022-04-01	2 versions
CVE-2022-22947US	critical10.0OT critical	98.3% (100th)	KEV	no fix	2022-03-03	= 22.1.1
CVE-2021-45105US	medium5.9	100.0% (100th)	Exploit	no fix	2021-12-18	= 1.7.0
CVE-2021-34429US	medium5.3OT high	99.3% (100th)	Exploit	no fix	2021-07-15	= 1.5.0
CVE-2021-3712US	high7.4	50.4% (99th)	Exploit	no fix	2021-08-24	= 1.7.0
CVE-2019-17195US	critical9.8	11.1% (96th)	Exploit	no fix	2019-10-15	= 1.7.0
CVE-2021-2471US	high7.9OT high	7.49% (94th)	Exploit	no fix	2021-10-20	= 1.7.0
CVE-2020-36518US	high7.5	4.86% (92nd)	Exploit	no fix	2022-03-11	= 22.1.1
CVE-2019-10219US	medium6.1	2.16% (82nd)	Exploit	no fix	2019-11-08	3 versions
CVE-2021-3711US	critical9.8	87.8% (100th)	—	no fix	2021-08-24	= 1.7.0
CVE-2021-25122US	high7.5	18.1% (97th)	—	no fix	2021-03-01	= 1.6.0
CVE-2021-25329US	high7.0	9.49% (95th)	—	no fix	2021-03-01	= 1.6.0
CVE-2021-37136US	high7.5	5.91% (93rd)	—	no fix	2021-10-19	= 1.7.0
CVE-2022-22946US	medium5.5	4.85% (92nd)	—	no fix	2022-03-04	= 22.1.1
CVE-2022-23219US	critical9.8	4.69% (92nd)	—	no fix	2022-01-14	= 22.1.1
CVE-2021-22946US	high7.5OT elevated	4.54% (92nd)	—	no fix	2021-09-29	= 22.1.1
CVE-2022-24407US	high8.8	4.12% (91st)	—	no fix	2022-02-24	= 22.1.1
CVE-2021-3326US	high7.5	3.82% (90th)	—	no fix	2021-01-27	= 1.5.0
CVE-2021-38604US	high7.5	3.72% (90th)	—	no fix	2021-08-12	= 22.1.1
CVE-2021-43396US	high7.5OT elevated	3.29% (88th)	—	no fix	2021-11-04	= 22.1.1
CVE-2021-22947US	medium5.9OT elevated	3.01% (87th)	—	no fix	2021-09-29	= 22.1.1
CVE-2021-43797US	medium6.5	2.88% (87th)	—	no fix	2021-12-09	= 1.7.0
CVE-2021-33880US	medium5.9	2.27% (83rd)	—	no fix	2021-06-06	= 1.5.0
CVE-2020-14340US	medium5.9	2.21% (83rd)	—	no fix	2021-06-02	= 1.15.0
CVE-2021-22118US	high7.8	0.38% (32nd)	—	no fix	2021-05-27	= 1.6.0

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-94Improper Control of Generation of Code ('Code Injection')3 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')2 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')2 CVEs
CWE-863Incorrect Authorization2 CVEs
CWE-917Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE26 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan