Known vulnerabilities in Communications Unified Assurance

Vendor: Oracle
Software: Communications Unified Assurance
Software CPE: cpe:2.3:a:oracle:communications_unified_assurance:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 145
Public exploits: 22
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Communications Unified Assurance Communications Unified Assurance is affected by 145 known vulnerabilities: 5 critical, 27 high, 88 medium, 25 low Critical High Medium Low

Vulnerabilities (145)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU133419 - Improper input validation
CVE-2026-33557		 CWE-20 High
No
No
 - 05.06.2026 SB2026060513
#VU133420 - Improper input validation
CVE-2026-24308		 CWE-20 Medium
No
No
 - 05.06.2026 SB2026060513
#VU129540 - Out-of-bounds read
CVE-2026-34059		 CWE-125 Medium
No
No
 - 04.05.2026 SB2026050479
SB2026050772
SB2026051240
and 25 more
#VU128313 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-41044		 CWE-94 Medium
No
No
 - 28.04.2026 SB2026042852
SB2026050348
SB2026050349
and 5 more
#VU125745 - Information Exposure Through Log Files
CVE-2026-34487		 CWE-532 Medium
No
No
 - 09.04.2026 SB20260409110
SB20260417131
SB20260422214
and 20 more
#VU124874 - Insufficient Verification of Data Authenticity
CVE-2026-26007		 CWE-345 Medium
No
No
 - 06.04.2026 SB2026040616
SB2026040617
SB2026040618
and 29 more
#VU124541 - DEPRECATED: Often Misused: Path Manipulation
CVE-2026-21637		 CWE-249 High
No
No
 - 25.03.2026 SB2026032902
SB20260415182
SB20260415187
and 25 more
#VU123981 - Resource exhaustion
CVE-2025-58181		 CWE-400 Medium
No
No
 - 13.03.2026 SB2025122903
SB2026031315
SB2026031321
and 20 more
#VU122999 - Improper Authorization
CVE-2026-24734		 CWE-285 Medium
No
No
 - 17.02.2026 SB2026021766
SB2026030536
SB2026031245
and 24 more
#VU122489 - Heap-based Buffer Overflow
CVE-2026-25646		 CWE-122 High
No
No
 - 10.02.2026 SB2026021002
SB2026021255
SB2026021256
and 63 more
#VU122076 - Stack-based buffer overflow
CVE-2025-15467		 CWE-121 High
Available
No
 - 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 65 more
#VU122008 - Out-of-bounds write
CVE-2025-27821		 CWE-787 Low
No
No
 - 24.01.2026 SB2026012411
SB2026042214
SB2026042288
#VU120231 - Improper Validation of Certificate with Host Mismatch
CVE-2025-68161		 CWE-297 Medium
No
No
 - 22.12.2025 SB2025122245
SB2026012084
SB2026012087
and 99 more
#VU119230 - Allocation of Resources Without Limits or Throttling
CVE-2025-66418		 CWE-770 Medium
No
No
 - 05.12.2025 SB2025120581
SB2025121208
SB2025121938
and 93 more
#VU116213 - Out-of-bounds write
CVE-2025-9230		 CWE-787 Medium
No
No
 - 01.10.2025 SB2025100119
SB2025100132
SB2025100133
and 108 more
#VU116129 - Out-of-bounds read
CVE-2025-58050		 CWE-125 Medium
No
No
 - 26.09.2025 SB2025092615
SB2025092617
SB2025101331
and 3 more
#VU115573 - Protection Mechanism Failure
CVE-2025-41249		 CWE-693 Medium
No
No
 - 16.09.2025 SB20250916314
SB2025100741
SB20251008143
and 62 more
#VU115570 - Protection Mechanism Failure
CVE-2025-41248		 CWE-693 Medium
No
No
 - 16.09.2025 SB20250916313
SB2025100741
SB20251008143
and 33 more
#VU115138 - Out-of-bounds read
CVE-2025-9086		 CWE-125 Low
No
No
 - 10.09.2025 SB2025091034
SB2025091144
SB2025091301
and 44 more
#VU114761 - Resource exhaustion
CVE-2025-58057		 CWE-400 Medium
No
No
 - 03.09.2025 SB2025090340
SB2025090949
SB2025101530
and 45 more


Showing elements 1 - 20 out of 145