oracle communications cloud native core network slice selection function

Name: oracle communications cloud native core network slice selection function
Brand: oracle

productUS

cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

9critical11high8medium2low

updated 2026-10-27

vulnerabilities (30)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-22963US	critical9.8OT critical	99.9% (100th)	KEV	no fix	2022-04-01	2 versions
CVE-2022-22965US	critical9.8OT critical	99.6% (100th)	KEV	no fix	2022-04-01	3 versions
CVE-2022-22947US	critical10.0OT critical	98.3% (100th)	KEV	no fix	2022-03-03	2 versions
CVE-2021-45105US	medium5.9	100.0% (100th)	Exploit	no fix	2021-12-18	= 1.8.0
CVE-2019-0205US	high7.5	9.16% (95th)	Exploit	no fix	2019-10-29	= 1.2.1
CVE-2020-8554US	medium5.0	8.72% (95th)	Exploit	no fix	2021-01-21	= 1.2.1
CVE-2021-2471US	high7.9OT high	7.49% (94th)	Exploit	no fix	2021-10-20	= 1.8.0
CVE-2020-28052US	high8.1	7.22% (94th)	Exploit	no fix	2020-12-18	= 1.2.1
CVE-2020-36518US	high7.5	4.86% (92nd)	Exploit	no fix	2022-03-11	2 versions
CVE-2021-33560US	high7.5OT elevated	2.37% (84th)	Exploit	no fix	2021-06-08	= 1.8.0
CVE-2021-22901US	high8.1	63.5% (99th)	—	no fix	2021-06-11	= 1.8.0
CVE-2021-43527US	critical9.8	17.6% (97th)	—	no fix	2021-12-08	= 1.8.0
CVE-2019-20330US	critical9.8	8.64% (95th)	—	no fix	2020-01-03	= 1.2.1
CVE-2021-29921US	critical9.8	6.88% (94th)	—	no fix	2021-05-06	= 1.8.0
CVE-2020-13949US	high7.5	6.78% (94th)	—	no fix	2021-02-12	= 1.2.1
CVE-2019-0210US	high7.5	6.53% (94th)	—	no fix	2019-10-29	= 1.2.1
CVE-2021-37136US	high7.5	5.91% (93rd)	—	no fix	2021-10-19	= 1.8.0
CVE-2019-16942US	critical9.8	5.73% (93rd)	—	no fix	2019-10-01	= 1.2.1
CVE-2019-17531US	critical9.8	5.37% (93rd)	—	no fix	2019-10-12	= 1.2.1
CVE-2022-23308US	high7.5	5.12% (92nd)	—	no fix	2022-02-26	= 22.1.1
CVE-2019-16943US	critical9.8	4.74% (92nd)	—	no fix	2019-10-01	= 1.2.1
CVE-2021-22946US	high7.5OT elevated	4.54% (92nd)	—	no fix	2021-09-29	= 1.8.0
CVE-2021-22898US	low3.1	4.51% (91st)	—	no fix	2021-06-11	= 1.8.0
CVE-2021-22897US	medium5.3	4.26% (91st)	—	no fix	2021-06-11	= 1.8.0
CVE-2021-22947US	medium5.9OT elevated	3.01% (87th)	—	no fix	2021-09-29	= 1.8.0
CVE-2021-43797US	medium6.5	2.88% (87th)	—	no fix	2021-12-09	= 1.8.0
CVE-2020-29582US	medium5.3OT elevated	2.57% (85th)	—	no fix	2021-02-03	= 1.2.1
CVE-2021-37750US	medium6.5	2.50% (85th)	—	no fix	2021-08-23	= 22.1.0
CVE-2020-8908US	low3.3	0.92% (60th)	—	no fix	2020-12-10	= 1.2.1
CVE-2021-21275US	medium4.3	0.73% (54th)	—	no fix	2021-01-25	= 1.2.1

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation7 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor4 CVEs
CWE-502Deserialization of Untrusted Data4 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')3 CVEs
CWE-325Missing Cryptographic Step2 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-416Use After Free2 CVEs
CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE30 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan