Known vulnerabilities in Communications Unified Assurance 6.0.1 - page 2

Vendor: Oracle
Software: Communications Unified Assurance
Version: 6.0.1
Software CPE: cpe:2.3:a:oracle:communications_unified_assurance:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 46
Public exploits: 8
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Communications Unified Assurance version 6.0.1 Communications Unified Assurance 6.0.1 is affected by 46 vulnerabilities: 10 high, 31 medium, 5 low Critical High Medium Low

Vulnerabilities (46)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU77622 - Exposure of sensitive information to an unauthorized actor
CVE-2023-34981		 CWE-200 Medium
No
No
 6.0.3 22.06.2023 SB2023062241
SB2023070714
SB2023071901
and 24 more
#VU77112 - Use of Insufficiently Random Values
CVE-2023-3247		 CWE-330 Medium
No
No
 - 09.06.2023 SB2023060919
SB2023061105
SB2023061516
and 24 more
#VU75562 - Improper input validation
CVE-2023-20861		 CWE-20 Medium
No
No
 - 27.04.2023 SB2023042742
SB2023042746
SB2023042832
and 61 more
#VU75044 - Uncontrolled Recursion
CVE-2023-1370		 CWE-674 Medium
No
No
 - 12.04.2023 SB2023041258
SB2023041259
SB2023041809
and 130 more
#VU72427 - Allocation of Resources Without Limits or Throttling
CVE-2023-24998		 CWE-770 Medium
Public exploit available
No
 5.5.17 20.02.2023 SB2023022046
SB2023022047
SB2023030917
and 202 more
#VU72165 - Improper input validation
CVE-2023-0662		 CWE-20 Medium
No
No
 - 14.02.2023 SB2023021417
SB2023021526
SB2023022245
and 25 more
#VU71288 - Improper input validation
CVE-2023-21830		 CWE-20 Medium
No
No
 - 17.01.2023 SB2023011784
SB2023011785
SB2023012377
and 112 more
#VU71242 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-36760		 CWE-444 Medium
No
No
 - 17.01.2023 SB2023011740
SB2023011805
SB2023012728
and 33 more
#VU70385 - Deserialization of Untrusted Data
CVE-2022-1471		 CWE-502 High
Public exploit available
No
 - 15.12.2022 SB2022121539
SB2022121540
SB2022121928
and 124 more
#VU69293 - Improper input validation
CVE-2022-3171		 CWE-20 Medium
No
No
 5.5.10, 6.0.2 14.11.2022 SB2022111433
SB2022111440
SB2022112934
and 105 more
#VU68887 - Integer overflow
CVE-2022-37454		 CWE-190 High
Public exploit available
No
 - 01.11.2022 SB2022110118
SB2022110119
SB2022110209
and 69 more
#VU68866 - Improper Authorization
CVE-2022-31692		 CWE-285 High
No
No
 - 01.11.2022 SB2022110101
SB2022121119
SB2023011162
and 28 more
#VU68832 - Resource exhaustion
CVE-2022-42004		 CWE-400 Medium
No
No
 - 31.10.2022 SB2022103116
SB2022103117
SB2022111404
and 122 more
#VU68606 - Improper Verification of Cryptographic Signature
CVE-2020-16156		 CWE-347 High
No
No
 - 24.10.2022 SB2021121359
SB2022102433
SB2022102701
and 12 more
#VU65327 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-31081		 CWE-444 Medium
No
No
 - 14.07.2022 SB2022071425
SB2022071426
SB2022071826
and 13 more
#VU65273 - Improper Check or Handling of Exceptional Conditions
CVE-2022-32212		 CWE-703 Medium
No
No
 - 13.07.2022 SB2022071338
SB2022071610
SB2022071611
and 48 more
#VU63345 - Improper Authorization
CVE-2022-22978		 CWE-285 High
Public exploit available
No
 - 17.05.2022 SB2022051717
SB2022052009
SB2022052010
and 20 more
#VU58270 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41183		 CWE-79 Medium
No
No
 - 20.11.2021 SB2021112002
SB2022011943
SB2022011944
and 33 more
#VU26521 - Permissions, Privileges, and Access Controls
CVE-2020-7009		 CWE-264 Medium
No
No
 5.5.10, 6.0.2 01.04.2020 SB2020040158
SB20230418141
#VU24218 - Improper input validation
CVE-2019-11287		 CWE-20 Medium
No
No
 - 13.01.2020 SB2019112307
SB2020011311
SB2021062428
and 5 more


Showing elements 21 - 40 out of 46