Known vulnerabilities in Communications Service Catalog and Design

Vendor: Oracle
Software: Communications Service Catalog and Design
Software CPE: cpe:2.3:a:oracle:communications_service_catalog_and_design:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 34
Public exploits: 5
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Communications Service Catalog and Design Communications Service Catalog and Design is affected by 34 known vulnerabilities: 6 high, 19 medium, 9 low Critical High Medium Low

Vulnerabilities (34)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121007 - Exposure of sensitive information to an unauthorized actor
CVE-2025-66566		 CWE-200 Medium
No
No
 - 07.01.2026 SB2026010702
SB2026010705
SB2026010706
and 28 more
#VU114761 - Resource exhaustion
CVE-2025-58057		 CWE-400 Medium
No
No
 - 03.09.2025 SB2025090340
SB2025090949
SB2025101530
and 45 more
#VU114026 - Resource exhaustion
CVE-2025-55163		 CWE-400 Medium
No
No
 - 13.08.2025 SB2025081378
SB2025081948
SB2025081949
and 71 more
#VU113607 - Uncontrolled Recursion
CVE-2025-48924		 CWE-674 Medium
No
No
 - 04.08.2025 SB2025080422
SB2025080423
SB2025080427
and 180 more
#VU112146 - Server-Side Request Forgery (SSRF)
CVE-2025-27817		 CWE-918 High
Available
No
 - 03.07.2025 SB2025070339
SB2025070340
SB2025070345
and 42 more
#VU103770 - Improper input validation
CVE-2025-24970		 CWE-20 Medium
No
No
 - 11.02.2025 SB2025021186
SB202502197190
SB2025030409
and 88 more
#VU103289 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-12798		 CWE-94 Low
No
No
 - 24.01.2025 SB2025012460
SB2025012488
SB2025012495
and 28 more
#VU100259 - Resource Management Errors
CVE-2024-47535		 CWE-399 Low
No
No
 - 12.11.2024 SB2024111299
SB2024122313
SB2025012061
and 79 more
#VU98025 - Resource exhaustion
CVE-2024-47554		 CWE-400 Medium
No
No
 - 03.10.2024 SB2024100352
SB2024100421
SB2024101007
and 132 more
#VU97574 - Uncontrolled Recursion
CVE-2024-7254		 CWE-674 Medium
No
No
 - 19.09.2024 SB2024091904
SB2024100103
SB2024101050
and 90 more
#VU96484 - Improper Verification of Cryptographic Signature
CVE-2024-38807		 CWE-347 Low
No
No
 - 23.08.2024 SB2024082337
SB2025012192
SB2025012468
and 1 more
#VU95166 - Incorrect Authorization
CVE-2024-27309		 CWE-863 Medium
No
No
 - 02.08.2024 SB2024080227
SB2024080228
SB20240827147
and 5 more
#VU87779 - Exposure of sensitive information to an unauthorized actor
CVE-2024-29025		 CWE-200 Medium
No
No
 - 25.03.2024 SB2024032532
SB2024040230
SB2024042995
and 95 more
#VU86992 - Allocation of Resources Without Limits or Throttling
CVE-2024-21634		 CWE-770 Medium
No
No
 - 04.03.2024 SB2024030419
SB2024031125
SB2024032143
and 18 more
#VU85618 - Deserialization of Untrusted Data
CVE-2023-6378		 CWE-502 Medium
No
No
 - 19.01.2024 SB2024011926
SB2024011927
SB2024012316
and 39 more
#VU85304 - Excessive Iteration
CVE-2023-4043		 CWE-834 Medium
No
No
 - 11.01.2024 SB2024011123
SB2024012646
SB2024020506
and 15 more
#VU79532 - Untrusted Search Path
CVE-2023-28823		 CWE-426 Low
No
No
 - 15.08.2023 SB2023081541
SB2024011767
SB20241015183
#VU78328 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2023-33201		 CWE-90 Medium
No
No
 - 17.07.2023 SB2023071740
SB2023071742
SB2023071902
and 91 more
#VU73703 - Exposure of sensitive information to an unauthorized actor
CVE-2023-0833		 CWE-200 Low
No
No
 - 15.03.2023 SB2023031511
SB2023051919
SB2024031230
and 8 more
#VU47481 - Improper input validation
CVE-2020-13956		 CWE-20 Medium
No
No
 7.4.2.8.0 09.10.2020 SB2020100902
SB2020101604
SB2021042104
and 77 more


Showing elements 1 - 20 out of 34