Oracle Communications Cloud Native Core Policy 1.9.0

CPE Details

Oracle Communications Cloud Native Core Policy 1.9.0
1.9.0
2021-09-02
15h32 +00:00
2021-09-07
13h58 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.9.0:*:*:*:*:*:*:*

Informations

Vendor

oracle

Product

communications_cloud_native_core_policy

Version

1.9.0

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2019-12399 2020-01-14 13h28 +00:00 When Connect workers in Apache Kafka 2.0.0, 2.0.1, 2.1.0, 2.1.1, 2.2.0, 2.2.1, or 2.3.0 are configured with one or more config providers, and a connector is created/updated on that Connect cluster to use an externalized secret variable in a substring of a connector configuration property value, then any client can issue a request to the same Connect cluster to obtain the connector's task configuration and the response will contain the plaintext secret rather than the externalized secrets variables.
7.5
High
CVE-2019-10086 2019-08-20 18h10 +00:00 In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.
7.3
High