Known vulnerabilities in Oracle Communications Cloud Native Core Policy

Vendor: Oracle
Software: Oracle Communications Cloud Native Core Policy
Software CPE: cpe:2.3:a:oracle:oracle_communications_cloud_native_core_policy:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 160
Public exploits: 18
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Communications Cloud Native Core Policy Oracle Communications Cloud Native Core Policy is affected by 160 known vulnerabilities: 4 critical, 21 high, 103 medium, 32 low Critical High Medium Low

Vulnerabilities (160)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126717 - Improper input validation
CVE-2026-21452		 CWE-20 Medium
No
No
 - 22.04.2026 SB2026042276
#VU126387 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-55130		 CWE-59 Low
No
No
 - 17.04.2026 SB2026041708
SB2026041712
SB2026041714
and 17 more
#VU124874 - Insufficient Verification of Data Authenticity
CVE-2026-26007		 CWE-345 Medium
No
No
 - 06.04.2026 SB2026040616
SB2026040617
SB2026040618
and 29 more
#VU124422 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-33870		 CWE-444 Medium
Available
No
 - 25.03.2026 SB2026032533
SB20260415180
SB2026042043
and 20 more
#VU123069 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-27099		 CWE-79 Low
No
No
 - 19.02.2026 SB2026021922
SB2026042271
SB2026042272
and 4 more
#VU122270 - Resource exhaustion
CVE-2026-23490		 CWE-400 Medium
No
No
 - 03.02.2026 SB2026020365
SB2026020366
SB2026020370
and 52 more
#VU121703 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-12383		 CWE-362 Medium
No
No
 - 20.01.2026 SB2026012071
SB2026012079
SB20260120119
and 17 more
#VU121145 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2025-12543		 CWE-644 Medium
No
No
 - 10.01.2026 SB2026011002
SB2026021723
SB2026021724
and 9 more
#VU121072 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-21441		 CWE-409 Medium
No
No
 - 07.01.2026 SB2026010780
SB2026011269
SB2026011328
and 89 more
#VU114761 - Resource exhaustion
CVE-2025-58057		 CWE-400 Medium
No
No
 - 03.09.2025 SB2025090340
SB2025090949
SB2025101530
and 45 more
#VU114316 - Resource exhaustion
CVE-2025-5115		 CWE-400 Medium
No
No
 - 21.08.2025 SB2025082101
SB2025082751
SB20250828111
and 42 more
#VU114026 - Resource exhaustion
CVE-2025-55163		 CWE-400 Medium
No
No
 - 13.08.2025 SB2025081378
SB2025081948
SB2025081949
and 71 more
#VU113187 - Double Free
CVE-2025-8058		 CWE-415 High
No
No
 - 24.07.2025 SB2025072408
SB2025072511
SB2025072512
and 59 more
#VU113156 - Memory corruption
CVE-2025-6965		 CWE-119 Medium
No
No
 - 22.07.2025 SB2025072254
SB2025072807
SB2025072890
and 100 more
#VU111966 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-4517		 CWE-22 High
Available
No
 - 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 77 more
#VU111223 - Type confusion
CVE-2025-49796		 CWE-843 Medium
No
No
 - 17.06.2025 SB2025061728
SB2025070832
SB20250709112
and 84 more
#VU109844 - Untrusted Search Path
CVE-2025-4802		 CWE-426 Low
No
No
 - 27.05.2025 SB2025052725
SB2025052735
SB2025052910
and 36 more
#VU106932 - Permissions, Privileges, and Access Controls
CVE-2025-31721		 CWE-264 Medium
No
No
 - 03.04.2025 SB2025040337
SB2025041695
SB20250416103
and 7 more
#VU103980 - Resource exhaustion
CVE-2024-12133		 CWE-400 Medium
No
No
 - 14.02.2025 SB2025021428
SB2025021429
SB2025021430
and 78 more
#VU72323 - Improper Certificate Validation
CVE-2021-0341		 CWE-295 Medium
No
No
 - 16.02.2023 SB2023021628
SB2023051043
SB2023051044
and 14 more


Showing elements 1 - 20 out of 160