Oracle Communications Cloud Native Core Policy 1.9.0

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.9.0:*:*:*:*:*:*:*

part: a version: 1.9.0 update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductCommunications Cloud Native Core Policy (3d131797-310a-5e0c-a97a-49da7b425208)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-12399 vulnerable 2026-06-08 05:12:39.022556 Details available
When Connect workers in Apache Kafka 2.0.0, 2.0.1, 2.1.0, 2.1.1, 2.2.0, 2.2.1, or 2.3.0 are configured with one or more config providers, and a connector is created/updated on that Connect cluster to use an externalized secret variable in a substring of a connector configuration property value, then any client can issue a request to the same Connect cluster to obtain the connector's task configuration and the response will contain the plaintext secret rather than the externalized secrets variables.
Published: 2020-01-14T14:28:57.000Z
Updated: 2024-08-04T23:17:40.107Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10086 vulnerable 2026-06-08 05:12:22.151751 Details available
In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.
Published: 2019-08-20T20:10:15.000Z
Updated: 2024-08-04T22:10:09.585Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.