Oracle Communications Cloud Native Core Policy 1.5.0

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.5.0:*:*:*:*:*:*:*

part: a version: 1.5.0 update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductCommunications Cloud Native Core Policy (3d131797-310a-5e0c-a97a-49da7b425208)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-5398 vulnerable 2026-06-08 05:26:42.754645 RFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux Application
HIGH (8)
In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a reflected file download (RFD) attack when it sets a "Content-Disposition" header in the response where the filename attribute is derived from user supplied input.
Published: 2020-01-16T23:55:15.596Z
Updated: 2024-09-16T17:43:32.422Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-24553 vulnerable 2026-06-08 05:22:34.395898 Details available
Go before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for CGI/FCGI handlers that lack a Content-Type header.
Published: 2020-09-02T16:25:52.000Z
Updated: 2024-08-04T15:12:09.157Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-9735 vulnerable 2026-06-08 05:10:10.388828 Details available
Jetty through 9.4.x is prone to a timing channel in util/security/Password.java, which makes it easier for remote attackers to obtain access by observing elapsed times before rejection of incorrect passwords.
Published: 2017-06-16T21:00:00.000Z
Updated: 2024-08-05T17:18:01.294Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.