[Snyk] Fix for 3 vulnerabilities

[karencapiiro]

Snyk has created this PR to fix 3 vulnerabilities in the maven dependencies of this project.

Snyk changed the following file(s):

• webgoat/pom.xml

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score	Upgrade
	Allocation of Resources Without Limits or Throttling SNYK-JAVA-COMMONSFILEUPLOAD-10363252	167	commons-fileupload:commons-fileupload: 1.2.1 -> 1.6.0 No Known Exploit
	Allocation of Resources Without Limits or Throttling SNYK-JAVA-ORGAPACHETOMCAT-10365123	167	org.apache.tomcat:tomcat-catalina: 7.0.27 -> 9.0.106 Major version upgrade No Known Exploit
	Authentication Bypass Using an Alternate Path or Channel SNYK-JAVA-ORGAPACHETOMCAT-10365311	104	org.apache.tomcat:tomcat-catalina: 7.0.27 -> 9.0.106 Major version upgrade No Known Exploit

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Allocation of Resources Without Limits or Throttling

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	org.apache.tomcat/​tomcat-api@​7.0.27 ⏵ 9.0.106	+2		-11
	org.apache.tomcat/​tomcat-juli@​7.0.27 ⏵ 9.0.106	+8				+20
	org.apache.tomcat/​tomcat-servlet-api@​7.0.27 ⏵ 9.0.106	+64		-11		+40
	org.apache.tomcat/​tomcat-catalina@​7.0.27 ⏵ 9.0.106	+68	+75		+1	+20
	org.apache.tomcat/​tomcat-util@​7.0.27 ⏵ 9.0.106	+10	+2			+20
	commons-fileupload/​commons-fileupload@​1.2.1 ⏵ 1.6.0	+10	+75			+20
	org.apache.tomcat/​tomcat-annotations-api@​7.0.27 ⏵ 9.0.106	+3		-11

View full report

[rafikmojr]

Checkmarx One – Scan Summary & Details – 447961ae-e4ac-4c91-9623-c2365d815418

New Issues (97)

Checkmarx found the following issues in this Pull Request

Severity	Issue	Source File / Package	Checkmarx Insight
	Stored_XSS	/webgoat/src/main/java/org/owasp/webgoat/lessons/PathBasedAccessControl.java: 80	details The method embeds untrusted data in generated output with addElement, at line 89 of /webgoat/src/main/java/org/owasp/webgoat/lessons/PathBasedAcce... ID: lnBRk%2FjTQVvf1HxyUMpUhiUCZbU%3D Attack Vector
	CVE-2023-26464	Maven-log4j:log4j-1.2.8	details Recommended version: 1.2.17.redhat-00008 Description: When using the Chainsaw or SocketAppender components with Log4j versions 1.0.4 prior to 2.0, an attacker that manages to cause a logging entry invo... Attack Vector: NETWORK Attack Complexity: LOW ID: 5a%2FJN89q2Lam82SC7yI3dwEBuESvSMuQQyUd1shXl7g%3D Vulnerable Package
	CVE-2025-48734	Maven-commons-beanutils:commons-beanutils-1.6	details Recommended version: 1.11.0 Description: An Improper Access Control vulnerability exists in Apache Commons. A special "BeanIntrospector" class was added in version 1.9.2. This can be used ... Attack Vector: NETWORK Attack Complexity: LOW ID: hLyVpt2Qcar6JypP%2FU9MMFAagxCBy0BQWwj1uvff4Fc%3D Vulnerable Package
	Reflected_XSS	/webgoat/src/main/java/org/owasp/webgoat/lessons/CommandInjection.java: 71	details The method embeds untrusted data in generated output with StringElement, at line 128 of /webgoat/src/main/java/org/owasp/webgoat/lessons/CommandIn... ID: OXymFDUpgt8pPhb03q1NsZqWIkI%3D Attack Vector
	Reflected_XSS	/webgoat/src/main/java/org/owasp/webgoat/lessons/admin/ReportCardScreen.java: 79	details The method embeds untrusted data in generated output with addElement, at line 274 of /webgoat/src/main/java/org/owasp/webgoat/lessons/admin/Report... ID: Fw2tXU6a8CG9mvNqzB9NLSnZCyE%3D Attack Vector
	Reflected_XSS	/webgoat/src/main/java/org/owasp/webgoat/lessons/SqlStringInjection.java: 203	details The method embeds untrusted data in generated output with PRE, at line 95 of /webgoat/src/main/java/org/owasp/webgoat/lessons/SqlStringInjection.... ID: FuR67lrat%2Ffx76PCUKWR8zBOaRU%3D Attack Vector
	Reflected_XSS	/webgoat/src/main/java/org/owasp/webgoat/lessons/SilentTransactions.java: 74	details The method embeds untrusted data in generated output with print, at line 89 of /webgoat/src/main/java/org/owasp/webgoat/lessons/SilentTransactions... ID: b%2B52eACyHcBcp%2Fgfacqb3k98J6c%3D Attack Vector
	Reflected_XSS	/webgoat/src/main/java/org/owasp/webgoat/lessons/JavaScriptValidation.java: 114	details The method embeds untrusted data in generated output with addElement, at line 151 of /webgoat/src/main/java/org/owasp/webgoat/lessons/JavaScriptVa... ID: bIKemd%2Fe5kjvsbl6ipo7GDlVUc0%3D Attack Vector
	Reflected_XSS	/webgoat/src/main/java/org/owasp/webgoat/lessons/JavaScriptValidation.java: 113	details The method embeds untrusted data in generated output with addElement, at line 147 of /webgoat/src/main/java/org/owasp/webgoat/lessons/JavaScriptVa... ID: J7WXNKRYtMDS74O7A5MJsaWq8e8%3D Attack Vector
	Reflected_XSS	/webgoat/src/main/java/org/owasp/webgoat/lessons/ClientSideValidation.java: 191	details The method embeds untrusted data in generated output with addElement, at line 235 of /webgoat/src/main/java/org/owasp/webgoat/lessons/ClientSideVa... ID: 3eqZSOTFiLcWn%2Fte9O15FMW7K6g%3D Attack Vector
	Reflected_XSS	/webgoat/src/main/java/org/owasp/webgoat/lessons/WsSqlInjection.java: 161	details The method embeds untrusted data in generated output with PRE, at line 179 of /webgoat/src/main/java/org/owasp/webgoat/lessons/WsSqlInjection.jav... ID: AeiWZ5M1mW2aZcsDoblpHavfcGs%3D Attack Vector
	Reflected_XSS	/webgoat/src/main/java/org/owasp/webgoat/lessons/LogSpoofing.java: 97	details The method embeds untrusted data in generated output with addElement, at line 108 of /webgoat/src/main/java/org/owasp/webgoat/lessons/LogSpoofing... ID: YEqbmmksDyre75AOHx1sjkJ1WvE%3D Attack Vector
	Reflected_XSS	/webgoat/src/main/java/org/owasp/webgoat/lessons/DOS_Login.java: 85	details The method embeds untrusted data in generated output with StringElement, at line 100 of /webgoat/src/main/java/org/owasp/webgoat/lessons/DOS_Logi... ID: avvgz%2BTE76YvuSz4O%2FuOS4BT%2BlQ%3D Attack Vector
	Reflected_XSS	/webgoat/src/main/java/org/owasp/webgoat/lessons/JavaScriptValidation.java: 108	details The method embeds untrusted data in generated output with addElement, at line 130 of /webgoat/src/main/java/org/owasp/webgoat/lessons/JavaScriptVa... ID: QKkWfOLLhNzTF7nkttV%2FAY4igfM%3D Attack Vector
	Reflected_XSS	/webgoat/src/main/java/org/owasp/webgoat/lessons/JavaScriptValidation.java: 110	details The method embeds untrusted data in generated output with addElement, at line 137 of /webgoat/src/main/java/org/owasp/webgoat/lessons/JavaScriptVa... ID: Ebh3nSMY8n3L346PgC9NKn44sJM%3D Attack Vector
	Reflected_XSS	/webgoat/src/main/java/org/owasp/webgoat/lessons/JavaScriptValidation.java: 111	details The method embeds untrusted data in generated output with addElement, at line 140 of /webgoat/src/main/java/org/owasp/webgoat/lessons/JavaScriptVa... ID: XefDefIK0wp017AW7U2%2BPy95J%2FY%3D Attack Vector
	Reflected_XSS	/webgoat/src/main/java/org/owasp/webgoat/lessons/JavaScriptValidation.java: 112	details The method embeds untrusted data in generated output with addElement, at line 143 of /webgoat/src/main/java/org/owasp/webgoat/lessons/JavaScriptVa... ID: RC9kRPQOCH6tYSYffRDmuxci5xY%3D Attack Vector
	Reflected_XSS	/webgoat/src/main/java/org/owasp/webgoat/lessons/JavaScriptValidation.java: 109	details The method embeds untrusted data in generated output with addElement, at line 133 of /webgoat/src/main/java/org/owasp/webgoat/lessons/JavaScriptVa... ID: gNkMn8%2BNz8ametNsWdnPETvchj8%3D Attack Vector
	Reflected_XSS	/webgoat/src/main/java/org/owasp/webgoat/lessons/FailOpenAuthentication.java: 75	details The method embeds untrusted data in generated output with addElement, at line 350 of /webgoat/src/main/java/org/owasp/webgoat/lessons/WeakAuthenti... ID: W3%2FkOjt6mYAjQL9FxqPywSxtVUk%3D Attack Vector
	Reflected_XSS	/webgoat/src/main/java/org/owasp/webgoat/lessons/UncheckedEmail.java: 100	details The method embeds untrusted data in generated output with StringElement, at line 199 of /webgoat/src/main/java/org/owasp/webgoat/lessons/Unchecked... ID: 8qFJRBblFSbzVunv%2BfOt4p6iV5w%3D Attack Vector
	Reflected_XSS	/webgoat/src/main/java/org/owasp/webgoat/lessons/UncheckedEmail.java: 100	details The method embeds untrusted data in generated output with StringElement, at line 203 of /webgoat/src/main/java/org/owasp/webgoat/lessons/Unchecked... ID: nMRZ8wHv%2BtEGDRqD5EZg%2BBjtxFc%3D Attack Vector
	Reflected_XSS	/webgoat/src/main/java/org/owasp/webgoat/lessons/UncheckedEmail.java: 100	details The method embeds untrusted data in generated output with StringElement, at line 205 of /webgoat/src/main/java/org/owasp/webgoat/lessons/Unchecked... ID: 7NhXUy9sFjcFKxTV1DzGDdbJpNk%3D Attack Vector
	Reflected_XSS	/webgoat/src/main/java/org/owasp/webgoat/lessons/UncheckedEmail.java: 100	details The method embeds untrusted data in generated output with addElement, at line 195 of /webgoat/src/main/java/org/owasp/webgoat/lessons/UncheckedEma... ID: ZtqHasD0olaw9HRyBAE19P2pDEw%3D Attack Vector
	Reflected_XSS	/webgoat/src/main/java/org/owasp/webgoat/lessons/UncheckedEmail.java: 104	details The method embeds untrusted data in generated output with StringElement, at line 209 of /webgoat/src/main/java/org/owasp/webgoat/lessons/Unchecked... ID: ymLgueGAEmzg3pUoxHD%2FPIWZEPk%3D Attack Vector
	Reflected_XSS	/webgoat/src/main/java/org/owasp/webgoat/lessons/UncheckedEmail.java: 103	details The method embeds untrusted data in generated output with addElement, at line 277 of /webgoat/src/main/java/org/owasp/webgoat/lessons/UncheckedEma... ID: 2dhBj%2FC8YVmfBCZ1ZoWRfuoQvRk%3D Attack Vector
	Reflected_XSS	/webgoat/src/main/java/org/owasp/webgoat/lessons/BackDoors.java: 244	details The method embeds untrusted data in generated output with Div, at line 250 of /webgoat/src/main/java/org/owasp/webgoat/lessons/BackDoors.java. T... ID: %2FBVBk%2BwHZhMN97Dffyk%2Fz6cSLmU%3D Attack Vector
	Reflected_XSS	/webgoat/src/main/java/org/owasp/webgoat/lessons/UncheckedEmail.java: 103	details The method embeds untrusted data in generated output with TD, at line 276 of /webgoat/src/main/java/org/owasp/webgoat/lessons/UncheckedEmail.java... ID: %2FzDQKGEj4E%2FCz8V35P0DffFewNM%3D Attack Vector
	Reflected_XSS	/webgoat/src/main/java/org/owasp/webgoat/lessons/UncheckedEmail.java: 103	details The method embeds untrusted data in generated output with StringElement, at line 212 of /webgoat/src/main/java/org/owasp/webgoat/lessons/Unchecked... ID: hLnoTTSyEl6QgiysmW0rAjf%2Fii0%3D Attack Vector
	Reflected_XSS	/webgoat/src/main/java/org/owasp/webgoat/lessons/SqlNumericInjection.java: 98	details The method embeds untrusted data in generated output with PRE, at line 109 of /webgoat/src/main/java/org/owasp/webgoat/lessons/SqlNumericInjection... ID: M13xldWATxl7gEjKOngHHPRsBms%3D Attack Vector
	Reflected_XSS	/webgoat/src/main/java/org/owasp/webgoat/lessons/DOS_Login.java: 86	details The method embeds untrusted data in generated output with StringElement, at line 100 of /webgoat/src/main/java/org/owasp/webgoat/lessons/DOS_Logi... ID: G%2Fq%2BfiVoaC1JshvFUjRIFhFodwU%3D Attack Vector
	Reflected_XSS	/webgoat/src/main/java/org/owasp/webgoat/lessons/Phishing.java: 93	details The method embeds untrusted data in generated output with addElement, at line 142 of /webgoat/src/main/java/org/owasp/webgoat/lessons/Phishing.ja... ID: t1d6WDdjHr%2F15%2BoKVGQlN7Du1uE%3D Attack Vector
	Reflected_XSS	/webgoat/src/main/java/org/owasp/webgoat/lessons/Phishing.java: 93	details The method embeds untrusted data in generated output with StringElement, at line 150 of /webgoat/src/main/java/org/owasp/webgoat/lessons/Phishing... ID: 1Kv7cMAeFMFBD510H9RzmuYdkgA%3D Attack Vector
	Reflected_XSS	/webgoat/src/main/java/org/owasp/webgoat/lessons/AccessControlMatrix.java: 80	details The method embeds untrusted data in generated output with addElement, at line 101 of /webgoat/src/main/java/org/owasp/webgoat/lessons/AccessContro... ID: ojONSyw%2FqQoYRS7L7PHOefuedBg%3D Attack Vector
	Reflected_XSS	/webgoat/src/main/java/org/owasp/webgoat/lessons/AccessControlMatrix.java: 79	details The method embeds untrusted data in generated output with addElement, at line 92 of /webgoat/src/main/java/org/owasp/webgoat/lessons/AccessControl... ID: ugSlbnKDjkxXjNaJxjrjDmMytKI%3D Attack Vector

More results are available on the CxOne platform

Fixed Issues (627)

Great job! The following issues were fixed in this Pull Request

Severity	Issue	Source File / Package
	CVE-2013-2186	Maven-commons-fileupload:commons-fileupload-1.2.1
	CVE-2014-0050	Maven-commons-fileupload:commons-fileupload-1.2.1
	CVE-2015-5346	Maven-org.apache.tomcat:tomcat-catalina-7.0.27
	CVE-2016-0714	Maven-org.apache.tomcat:tomcat-catalina-7.0.27
	CVE-2016-1000031	Maven-commons-fileupload:commons-fileupload-1.2.1
	CVE-2016-3092	Maven-commons-fileupload:commons-fileupload-1.2.1
	CVE-2016-5388	Maven-org.apache.tomcat:tomcat-catalina-7.0.27
	CVE-2016-6797	Maven-org.apache.tomcat:tomcat-catalina-7.0.27
	CVE-2017-12615	Maven-org.apache.tomcat:tomcat-catalina-7.0.27
	CVE-2017-12616	Maven-org.apache.tomcat:tomcat-catalina-7.0.27
	CVE-2017-12617	Maven-org.apache.tomcat:tomcat-catalina-7.0.27
	CVE-2017-5648	Maven-org.apache.tomcat:tomcat-catalina-7.0.27
	CVE-2017-5664	Maven-org.apache.tomcat:tomcat-catalina-7.0.27
	CVE-2018-1336	Maven-org.apache.tomcat:tomcat-catalina-7.0.27
	CVE-2019-0232	Maven-org.apache.tomcat:tomcat-catalina-7.0.27
	CVE-2019-17563	Maven-org.apache.tomcat:tomcat-catalina-7.0.27
	CVE-2020-9484	Maven-org.apache.tomcat:tomcat-catalina-7.0.27
	CVE-2021-25329	Maven-org.apache.tomcat:tomcat-catalina-7.0.27
	CVE-2023-24998	Maven-commons-fileupload:commons-fileupload-1.2.1
	Client_DOM_Code_Injection	/webgoat/src/main/webapp/javascript/menu_system.js: 139
	Client_DOM_Stored_Code_Injection	/webgoat/src/main/webapp/javascript/eval.js: 39
	Client_DOM_Stored_XSS	/webgoat/src/main/webapp/javascript/clientSideFiltering.js: 92
	Client_DOM_Stored_XSS	/webgoat/src/main/webapp/javascript/sameOrigin.js: 56
	Command_Injection	/webgoat/src/main/java/org/owasp/webgoat/lessons/CommandInjection.java: 71
	Command_Injection	/webgoat/src/main/java/org/owasp/webgoat/lessons/CommandInjection.java: 71
	Command_Injection	/webgoat/src/main/java/org/owasp/webgoat/lessons/Challenge2Screen.java: 641
	Command_Injection	/webgoat/src/main/java/org/owasp/webgoat/lessons/Challenge2Screen.java: 641
	Command_Injection	/webgoat/src/main/java/org/owasp/webgoat/session/ParameterParser.java: 581
	Connection_String_Injection	/webgoat/src/main/java/org/owasp/webgoat/session/WebSession.java: 816
	Reflected_XSS_All_Clients	/webgoat/src/main/java/org/owasp/webgoat/session/WebSession.java: 1060
	Reflected_XSS_All_Clients	/webgoat/src/main/java/org/owasp/webgoat/lessons/SessionFixation.java: 144
	Reflected_XSS_All_Clients	/webgoat/src/main/java/org/owasp/webgoat/lessons/SessionFixation.java: 144
	Reflected_XSS_All_Clients	/webgoat/src/main/java/org/owasp/webgoat/lessons/SessionFixation.java: 144
	Reflected_XSS_All_Clients	/webgoat/src/main/java/org/owasp/webgoat/lessons/Encoding.java: 183
	Reflected_XSS_All_Clients	/webgoat/src/main/java/org/owasp/webgoat/lessons/ClientSideValidation.java: 191
	Reflected_XSS_All_Clients	/webgoat/src/main/java/org/owasp/webgoat/lessons/ClientSideValidation.java: 191
	Reflected_XSS_All_Clients	/webgoat/src/main/java/org/owasp/webgoat/lessons/ClientSideValidation.java: 191
	Reflected_XSS_All_Clients	/webgoat/src/main/java/org/owasp/webgoat/lessons/JavaScriptValidation.java: 109
	Reflected_XSS_All_Clients	/webgoat/src/main/java/org/owasp/webgoat/lessons/Challenge2Screen.java: 793
	Reflected_XSS_All_Clients	/webgoat/src/main/java/org/owasp/webgoat/lessons/Challenge2Screen.java: 793
	Reflected_XSS_All_Clients	/webgoat/src/main/java/org/owasp/webgoat/lessons/Challenge2Screen.java: 793
	Reflected_XSS_All_Clients	/webgoat/src/main/java/org/owasp/webgoat/session/ParameterParser.java: 567
	Reflected_XSS_All_Clients	/webgoat/src/main/java/org/owasp/webgoat/session/ParameterParser.java: 567
	Reflected_XSS_All_Clients	/webgoat/src/main/java/org/owasp/webgoat/lessons/JavaScriptValidation.java: 110
	Reflected_XSS_All_Clients	/webgoat/src/main/java/org/owasp/webgoat/session/ParameterParser.java: 674
	Reflected_XSS_All_Clients	/webgoat/src/main/java/org/owasp/webgoat/session/ParameterParser.java: 674
	Reflected_XSS_All_Clients	/webgoat/src/main/java/org/owasp/webgoat/session/ParameterParser.java: 674
	Reflected_XSS_All_Clients	/webgoat/src/main/java/org/owasp/webgoat/session/ParameterParser.java: 674
	Reflected_XSS_All_Clients	/webgoat/src/main/java/org/owasp/webgoat/session/ParameterParser.java: 674
	Reflected_XSS_All_Clients	/webgoat/src/main/java/org/owasp/webgoat/session/ParameterParser.java: 674
	Reflected_XSS_All_Clients	/webgoat/src/main/java/org/owasp/webgoat/session/ParameterParser.java: 674
	Reflected_XSS_All_Clients	/webgoat/src/main/java/org/owasp/webgoat/session/ParameterParser.java: 674
	Reflected_XSS_All_Clients	/webgoat/src/main/java/org/owasp/webgoat/session/ParameterParser.java: 674
	Reflected_XSS_All_Clients	/webgoat/src/main/java/org/owasp/webgoat/session/ParameterParser.java: 674
	Reflected_XSS_All_Clients	/webgoat/src/main/java/org/owasp/webgoat/session/ParameterParser.java: 674
	Reflected_XSS_All_Clients	/webgoat/src/main/java/org/owasp/webgoat/session/ParameterParser.java: 674
	Reflected_XSS_All_Clients	/webgoat/src/main/java/org/owasp/webgoat/session/ParameterParser.java: 674
	Reflected_XSS_All_Clients	/webgoat/src/main/java/org/owasp/webgoat/session/ParameterParser.java: 674
	Reflected_XSS_All_Clients	/webgoat/src/main/java/org/owasp/webgoat/session/ParameterParser.java: 674
	Reflected_XSS_All_Clients	/webgoat/src/main/java/org/owasp/webgoat/session/ParameterParser.java: 674
	Reflected_XSS_All_Clients	/webgoat/src/main/java/org/owasp/webgoat/session/ParameterParser.java: 674
	Reflected_XSS_All_Clients	/webgoat/src/main/java/org/owasp/webgoat/session/ParameterParser.java: 674
	Reflected_XSS_All_Clients	/webgoat/src/main/java/org/owasp/webgoat/session/ParameterParser.java: 674
	Reflected_XSS_All_Clients	/webgoat/src/main/java/org/owasp/webgoat/session/ParameterParser.java: 674
	Reflected_XSS_All_Clients	/webgoat/src/main/java/org/owasp/webgoat/session/ParameterParser.java: 674
	Reflected_XSS_All_Clients	/webgoat/src/main/java/org/owasp/webgoat/session/ParameterParser.java: 674
	Reflected_XSS_All_Clients	/webgoat/src/main/java/org/owasp/webgoat/session/ParameterParser.java: 674
	Reflected_XSS_All_Clients	/webgoat/src/main/java/org/owasp/webgoat/session/ParameterParser.java: 674
	Reflected_XSS_All_Clients	/webgoat/src/main/java/org/owasp/webgoat/session/ParameterParser.java: 674
	Reflected_XSS_All_Clients	/webgoat/src/main/java/org/owasp/webgoat/session/ParameterParser.java: 674
	Reflected_XSS_All_Clients	/webgoat/src/main/java/org/owasp/webgoat/session/ParameterParser.java: 674
	Reflected_XSS_All_Clients	/webgoat/src/main/java/org/owasp/webgoat/lessons/Phishing.java: 93
	Reflected_XSS_All_Clients	/webgoat/src/main/java/org/owasp/webgoat/lessons/ConcurrencyCart.java: 172
	Reflected_XSS_All_Clients	/webgoat/src/main/java/org/owasp/webgoat/lessons/JavaScriptValidation.java: 111
	Reflected_XSS_All_Clients	/webgoat/src/main/java/org/owasp/webgoat/lessons/UncheckedEmail.java: 100
	Reflected_XSS_All_Clients	/webgoat/src/main/java/org/owasp/webgoat/lessons/UncheckedEmail.java: 100

More results are available on the CxOne platform