# Oracle Communications Cloud Native Core Automated Test Suite


- [CVE-2022-22963](https://insights.sbomify.com/CVE-2022-22963/): VMware Tanzu Spring Cloud Function Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2022-22965](https://insights.sbomify.com/CVE-2022-22965/): Spring Framework JDK 9+ Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2017-1000353](https://insights.sbomify.com/CVE-2017-1000353/): Jenkins Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2021-39144](https://insights.sbomify.com/CVE-2021-39144/): XStream Remote Code Execution (high 8.5, exploited in the wild)
- [CVE-2021-29921](https://insights.sbomify.com/CVE-2021-29921/): Security feature bypass in n/a (critical 9.8)
- [CVE-2019-10384](https://insights.sbomify.com/CVE-2019-10384/): Cross-Site Request Forgery in Jenkins (high 8.8)
- [CVE-2018-1999001](https://insights.sbomify.com/CVE-2018-1999001/): Improper Input Validation in Jenkins (high 8.8)
- [CVE-2021-39139](https://insights.sbomify.com/CVE-2021-39139/): XStream is vulnerable to an Arbitrary Code Execution attack (high 8.5)
- [CVE-2021-39141](https://insights.sbomify.com/CVE-2021-39141/): XStream is vulnerable to an Arbitrary Code Execution attack (high 8.5)
- [CVE-2021-39145](https://insights.sbomify.com/CVE-2021-39145/): XStream is vulnerable to an Arbitrary Code Execution attack (high 8.5)
- [CVE-2021-39146](https://insights.sbomify.com/CVE-2021-39146/): XStream is vulnerable to an Arbitrary Code Execution attack (high 8.5)
- [CVE-2021-39147](https://insights.sbomify.com/CVE-2021-39147/): XStream is vulnerable to an Arbitrary Code Execution attack (high 8.5)

---
From sbomify Insights: https://insights.sbomify.com/products/oracle/communications-cloud-native-core-automated-test-suite/