# Oracle Communications Cloud Native Core Binding Support Function


- [CVE-2022-22947](https://insights.sbomify.com/CVE-2022-22947/): VMware Spring Cloud Gateway Code Injection (critical 10.0, exploited in the wild)
- [CVE-2022-22965](https://insights.sbomify.com/CVE-2022-22965/): Spring Framework JDK 9+ Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2021-39144](https://insights.sbomify.com/CVE-2021-39144/): XStream Remote Code Execution (high 8.5, exploited in the wild)
- [CVE-2021-3773](https://insights.sbomify.com/CVE-2021-3773/): Information disclosure in kernel (critical 9.8)
- [CVE-2022-23219](https://insights.sbomify.com/CVE-2022-23219/): Memory corruption in n/a (critical 9.8)
- [CVE-2021-43527](https://insights.sbomify.com/CVE-2021-43527/): Memory corruption in NSS (critical 9.8)
- [CVE-2021-29921](https://insights.sbomify.com/CVE-2021-29921/): Security feature bypass in n/a (critical 9.8)
- [CVE-2021-39139](https://insights.sbomify.com/CVE-2021-39139/): XStream is vulnerable to an Arbitrary Code Execution attack (high 8.5)
- [CVE-2021-39141](https://insights.sbomify.com/CVE-2021-39141/): XStream is vulnerable to an Arbitrary Code Execution attack (high 8.5)
- [CVE-2021-39145](https://insights.sbomify.com/CVE-2021-39145/): XStream is vulnerable to an Arbitrary Code Execution attack (high 8.5)
- [CVE-2021-39146](https://insights.sbomify.com/CVE-2021-39146/): XStream is vulnerable to an Arbitrary Code Execution attack (high 8.5)
- [CVE-2021-39147](https://insights.sbomify.com/CVE-2021-39147/): XStream is vulnerable to an Arbitrary Code Execution attack (high 8.5)

---
From sbomify Insights: https://insights.sbomify.com/products/oracle/communications-cloud-native-core-binding-support-function/