Known vulnerabilities in Communications Unified Assurance 6.0.1

Vendor: Oracle
Software: Communications Unified Assurance
Version: 6.0.1
Software CPE: cpe:2.3:a:oracle:communications_unified_assurance:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 46
Public exploits: 8
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Communications Unified Assurance version 6.0.1 Communications Unified Assurance 6.0.1 is affected by 46 vulnerabilities: 10 high, 31 medium, 5 low Critical High Medium Low

Vulnerabilities (46)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU103291 - Improper input validation
CVE-2023-29408		 CWE-20 Medium
No
No
 - 24.01.2025 SB2025012464
#VU97574 - Uncontrolled Recursion
CVE-2024-7254		 CWE-674 Medium
No
No
 - 19.09.2024 SB2024091904
SB2024100103
SB2024101050
and 90 more
#VU96945 - Resource exhaustion
CVE-2024-7592		 CWE-400 Medium
No
No
 - 09.09.2024 SB2024090916
SB2024090917
SB2024090918
and 71 more
#VU96899 - Integer overflow
CVE-2024-45492		 CWE-190 High
No
No
 6.0.5 05.09.2024 SB20240905100
SB20240905101
SB20240905102
and 108 more
#VU95131 - Out-of-bounds read
CVE-2024-7264		 CWE-125 Medium
No
No
 - 01.08.2024 SB2024080110
SB2024080117
SB20240805104
and 43 more
#VU94793 - Uncontrolled Search Path Element
CVE-2024-41817		 CWE-427 Low
No
No
 6.0.5 28.07.2024 SB2024072801
SB20241015149
SB2025012194
and 1 more
#VU94503 - Server-Side Request Forgery (SSRF)
CVE-2024-40898		 CWE-918 High
Public exploit available
No
 6.0.5 17.07.2024 SB20240717136
SB2024071896
SB2024081362
and 13 more
#VU92262 - Exposure of sensitive information to an unauthorized actor
CVE-2024-37891		 CWE-200 Low
No
No
 - 19.06.2024 SB2024061955
SB20240625146
SB2024062605
and 193 more
#VU91109 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-5585		 CWE-78 Medium
No
No
 6.0.5 05.06.2024 SB2024060501
SB2024060502
SB2024060503
and 8 more
#VU90156 - Security Features
CVE-2024-35195		 CWE-254 Low
No
No
 - 31.05.2024 SB2024053174
SB2024053188
SB2024053192
and 116 more
#VU88153 - Resource exhaustion
CVE-2024-27316		 CWE-400 Medium
Public exploit available
No
 - 04.04.2024 SB2024040458
SB2024040502
SB2024040545
and 51 more
#VU87744 - Out-of-bounds write
CVE-2024-29133		 CWE-787 High
No
No
 - 22.03.2024 SB2024032169
SB2024032283
SB20240417122
and 40 more
#VU87551 - Exposure of sensitive information to an unauthorized actor
CVE-2024-28849		 CWE-200 Low
No
No
 - 15.03.2024 SB2024031508
SB2024031517
SB2024040365
and 59 more
#VU87510 - Improper input validation
CVE-2024-24549		 CWE-20 Medium
Public exploit available
No
 6.0.5 13.03.2024 SB2024031386
SB2024031879
SB2024031880
and 64 more
#VU87328 - Improper Access Control
CVE-2024-1442		 CWE-284 Medium
No
No
 - 11.03.2024 SB2024031121
SB2024050135
SB2024081506
and 2 more
#VU87326 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-24786		 CWE-835 Medium
No
No
 - 11.03.2024 SB2024031115
SB2024031435
SB2024031555
and 134 more
#VU82248 - Out-of-bounds read
CVE-2023-31122		 CWE-125 Medium
No
No
 - 19.10.2023 SB2023101942
SB2023101960
SB2023102101
and 42 more
#VU81803 - Exposed Dangerous Method or Function
CVE-2023-42794		 CWE-749 Medium
No
No
 - 10.10.2023 SB2023101084
SB2023101286
SB2023111528
and 22 more
#VU59924 - Improper input validation
CVE-2021-37137		 CWE-20 Medium
No
No
 6.0.4 23.01.2022 SB2022012310
SB2022012745
SB2022012753
and 43 more
#VU53000 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-29489		 CWE-79 Low
No
No
 - 10.05.2021 SB2021051010
SB2022080802
SB2023053119
and 2 more


Showing elements 1 - 20 out of 46