oracle communications cloud native core network exposure function

Name: oracle communications cloud native core network exposure function
Brand: oracle

productUS

cpe:2.3:a:oracle:communications_cloud_native_core_network_exposure_function:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

4critical10high15medium2low

updated 2026-10-27

vulnerabilities (31)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-22963US	critical9.8OT critical	99.9% (100th)	KEV	no fix	2022-04-01	= 22.1.0
CVE-2022-22965US	critical9.8OT critical	99.6% (100th)	KEV	no fix	2022-04-01	= 22.1.0
CVE-2022-22947US	critical10.0OT critical	98.3% (100th)	KEV	no fix	2022-03-03	= 22.1.0
CVE-2021-3773US	critical9.8	5.28% (93rd)	Exploit	no fix	2022-02-16	= 22.1.1
CVE-2021-45485US	high7.5OT elevated	3.82% (90th)	Exploit	no fix	2021-12-25	= 22.1.1
CVE-2022-25636US	high7.8	2.61% (85th)	Exploit	no fix	2022-02-24	= 22.1.1
CVE-2022-0001US	medium6.5	0.51% (43rd)	Exploit	no fix	2022-03-11	= 22.1.1
CVE-2021-3737US	high7.5	13.2% (96th)	—	no fix	2022-03-04	= 22.1.1
CVE-2021-20322US	high7.4OT elevated	6.90% (94th)	—	no fix	2022-02-18	= 22.1.1
CVE-2021-43818US	high7.1	2.66% (86th)	—	no fix	2021-12-13	= 22.1.1
CVE-2021-4203US	medium6.8	1.75% (78th)	—	no fix	2022-03-25	= 22.1.1
CVE-2021-3752US	high7.1	1.74% (78th)	—	no fix	2022-02-16	= 22.1.1
CVE-2022-1154US	high7.8	1.46% (73rd)	—	no fix	2022-03-30	= 22.1.1
CVE-2021-3772US	medium6.5	1.24% (69th)	—	no fix	2022-03-02	= 22.1.1
CVE-2021-3743US	high7.1	0.72% (54th)	—	no fix	2022-03-04	= 22.1.1
CVE-2021-43389US	medium5.5	0.72% (54th)	—	no fix	2021-11-04	= 22.1.1
CVE-2021-43976US	medium4.6	0.69% (53rd)	—	no fix	2021-11-17	= 22.1.1
CVE-2021-3612US	high7.8	0.69% (52nd)	—	no fix	2021-07-09	= 22.1.1
CVE-2021-3744US	medium5.5	0.53% (45th)	—	no fix	2022-03-04	= 22.1.1
CVE-2022-0286US	medium5.5	0.53% (45th)	—	no fix	2022-01-31	= 22.1.1
CVE-2021-4002US	medium4.4	0.52% (44th)	—	no fix	2022-03-03	= 22.1.1
CVE-2020-27820US	medium4.7	0.50% (43rd)	—	no fix	2021-11-03	= 22.1.1
CVE-2021-21781US	low3.3	0.50% (42nd)	—	no fix	2021-08-18	= 22.1.1
CVE-2021-42739US	medium6.7	0.47% (41st)	—	no fix	2021-10-20	= 22.1.1
CVE-2022-0002US	medium6.5	0.45% (39th)	—	no fix	2022-03-11	= 22.1.1
CVE-2021-45486US	low3.5OT elevated	0.40% (34th)	—	no fix	2021-12-25	= 22.1.1
CVE-2020-4788US	medium4.7	0.39% (33rd)	—	no fix	2020-11-20	= 22.1.1
CVE-2021-37159US	medium6.4	0.39% (33rd)	—	no fix	2021-07-21	= 22.1.1
CVE-2021-4083US	high7.0	0.31% (24th)	—	no fix	2022-01-18	= 22.1.1
CVE-2022-0322US	medium5.5	0.30% (22nd)	—	no fix	2022-03-25	= 22.1.1
CVE-2020-0404US	medium5.5	0.23% (14th)	—	no fix	2020-09-17	= 22.1.1

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-416Use After Free6 CVEs
CWE-20Improper Input Validation4 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')3 CVEs
CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')3 CVEs
CWE-787Out-of-bounds Write3 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')3 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE31 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan