Improper input validation in Oracle Communications Cloud Native Core Service Communication Proxy - CVE-2025-8837

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU159942

Improper input validation in Oracle Communications Cloud Native Core Service Communication Proxy - CVE-2025-8837

Published: November 7, 2026


Vulnerability identifier: #VU159942
CSH Severity: Low
CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2025-8837
CWE-ID: CWE-20
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local authenticated user to execute arbitrary code.

The vulnerability exists due to improper input validation within the ATS Framework (JasPer) component in Oracle Communications Cloud Native Core Service Communication Proxy. A local authenticated user can exploit this vulnerability to execute arbitrary code.


Affected software

Oracle Communications Cloud Native Core Service Communication Proxy
Oracle Communications Cloud Native Core Security Edge Protection Proxy
Oracle Communications Cloud Native Core Network Exposure Function
openEuler
jasper-devel
jasper-utils
jasper-help
jasper-debugsource
jasper-debuginfo
jasper

How to mitigate CVE-2025-8837

Install updates from vendor's website.

jasper-devel - update to 4.1.0-5
jasper-utils - update to 4.1.0-5
jasper-help - update to 4.1.0-5
jasper-debugsource - update to 4.1.0-5
jasper-debuginfo - update to 4.1.0-5
jasper - update to 4.1.0-5

External References

Related Security Bulletins