Known vulnerabilities in Communications Unified Assurance 6.0.1 - page 3

Vendor: Oracle
Software: Communications Unified Assurance
Version: 6.0.1
Software CPE: cpe:2.3:a:oracle:communications_unified_assurance:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 46
Public exploits: 8
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Communications Unified Assurance version 6.0.1 Communications Unified Assurance 6.0.1 is affected by 46 vulnerabilities: 10 high, 31 medium, 5 low Critical High Medium Low

Vulnerabilities (46)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU70332 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-41720		 CWE-22 Medium
No
No
 - 14.12.2022 SB2022121432
SB2022121433
SB2022121435
and 13 more
#VU68859 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-42252		 CWE-444 Medium
No
No
 - 31.10.2022 SB2022103146
SB2022112324
SB2022112533
and 43 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003		 CWE-502 Medium
No
No
 - 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU68307 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-42889		 CWE-94 High
Public exploit available
Exploited
 - 14.10.2022 SB2022101405
SB2022102709
SB2022110306
and 91 more
#VU67945 - Resource exhaustion
CVE-2022-36055		 CWE-400 Medium
No
No
 - 05.10.2022 SB2022100548
SB2022100551
SB2022102004
and 4 more
#VU27960 - Deserialization of Untrusted Data
CVE-2019-17571		 CWE-502 High
No
No
 - 18.05.2020 SB2019122027
SB2020051806
SB2020011497
and 28 more


Showing elements 41 - 60 out of 46