Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.11.0:*:*:*:*:*:*:*

part: a version: 1.11.0 update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductCommunications Cloud Native Core Policy (3d131797-310a-5e0c-a97a-49da7b425208)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-23337 vulnerable 2026-06-08 05:30:02.713966 Command Injection
HIGH (7.2)
Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function.
Published: 2021-02-15T12:15:14.715Z
Updated: 2024-09-16T19:15:17.074Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8203 vulnerable 2026-06-08 05:27:15.189374 Details available
Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20.
Published: 2020-07-15T16:10:27.000Z
Updated: 2024-08-04T09:56:28.214Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-28500 vulnerable 2026-06-08 05:23:56.188710 Regular Expression Denial of Service (ReDoS)
MEDIUM (5.3)
Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the toNumber, trim and trimEnd functions.
Published: 2021-02-15T11:10:16.225Z
Updated: 2024-09-16T22:15:52.206Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.