CVE-2020-7733: Oracle Communications Cloud Native Core Network Function Cloud Native Environment

High severity, CVSS 7.5. EPSS: 4.5% chance of exploitation in the next 30 days.

The package ua-parser-js before 0.7.22 are vulnerable to Regular Expression Denial of Service (ReDoS) via the regex for Redmi Phones and Mi Pad Tablets UA.

Affected products

• Oracle Communications Cloud Native Core Network Function Cloud Native Environment: version 1.7.0 only
• Ua-Parser-Js Project Ua-Parser-Js: before 0.7.22 (fixed in 0.7.22)

Published 2020-09-16. Last modified 2026-06-17.