Merge "Document OJSI-43 (CVE-2019-12113) vulnerability"

[sdnc/oam.git] / docs / release-notes.rst

diff --git a/docs/release-notes.rst b/docs/release-notes.rst
index 40192ad..fa83868 100644 (file)
--- a/docs/release-notes.rst
+++ b/docs/release-notes.rst
@@ -42,6 +42,10 @@ The full list of known issues in SDNC may be found in the ONAP Jira at <https://
 
 - CVE-2019-12132 `OJSI-41 <https://jira.onap.org/browse/OJSI-41>`_ SDNC service allows for arbitrary code execution in sla/dgUpload form
   Fixed temporarily by disabling admportal
+- CVE-2019-12123 `OJSI-42 <https://jira.onap.org/browse/OJSI-42>`_ SDNC service allows for arbitrary code execution in sla/printAsXml form
+  Fixed temporarily by disabling admportal
+- CVE-2019-12113 `OJSI-43 <https://jira.onap.org/browse/OJSI-43>`_ SDNC service allows for arbitrary code execution in sla/printAsGv form
+  Fixed temporarily by disabling admportal
 
 *Known Security Issues*