Known vulnerabilities in Communications Unified Assurance - page 2

Vendor: Oracle
Software: Communications Unified Assurance
Software CPE: cpe:2.3:a:oracle:communications_unified_assurance:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 145
Public exploits: 22
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Communications Unified Assurance Communications Unified Assurance is affected by 145 known vulnerabilities: 5 critical, 27 high, 88 medium, 25 low Critical High Medium Low

Vulnerabilities (145)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126718 - Improper input validation
CVE-2025-52967		 CWE-20 Medium
No
No
 - 22.04.2026 SB2026042288
#VU123877 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-3288		 CWE-94 High
No
No
 - 11.03.2026 SB2026031120
SB2026042288
#VU123672 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-33042		 CWE-94 Medium
No
No
 - 10.03.2026 SB2026031037
SB2026031038
SB2026031135
and 8 more
#VU122268 - Integer overflow
CVE-2026-25210		 CWE-190 High
No
No
 - 03.02.2026 SB2026020364
SB20260205121
SB2026020611
and 22 more
#VU121931 - Improper Authorization
CVE-2026-22022		 CWE-285 Low
No
No
 - 22.01.2026 SB2026012211
SB2026042288
SB2026061737
#VU121666 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2025-64718		 CWE-1321 Medium
No
No
 - 19.01.2026 SB2026011995
SB2026011999
SB20260119100
and 25 more
#VU121159 - Resource exhaustion
CVE-2025-15284		 CWE-400 Medium
No
No
 - 12.01.2026 SB2026011229
SB2026011326
SB2026011926
and 37 more
#VU120607 - Stack-based buffer overflow
CVE-2025-68615		 CWE-121 Critical
No
No
 - 26.12.2025 SB20251226349
SB2026010785
SB2026011301
and 43 more
#VU117682 - Resource exhaustion
CVE-2025-61795		 CWE-400 Medium
No
No
 - 27.10.2025 SB2025102749
SB20251031122
SB20251031123
and 39 more
#VU117680 - Improper Output Neutralization for Logs
CVE-2025-55754		 CWE-117 Low
No
No
 - 27.10.2025 SB2025102748
SB20251031122
SB20251031123
and 27 more
#VU117436 - Allocation of Resources Without Limits or Throttling
CVE-2025-8916		 CWE-770 Medium
No
No
 - 21.10.2025 SB2025102223
SB2025102241
SB2025102248
and 35 more
#VU117342 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-48913		 CWE-94 Medium
No
No
 - 17.10.2025 SB2025101733
SB2025101736
SB2025102866
and 4 more
#VU115751 - Resource exhaustion
CVE-2025-59375		 CWE-400 Medium
No
No
 - 17.09.2025 SB2025091783
SB2025091789
SB2025091790
and 107 more
#VU114316 - Resource exhaustion
CVE-2025-5115		 CWE-400 Medium
No
No
 - 21.08.2025 SB2025082101
SB2025082751
SB20250828111
and 42 more
#VU114093 - Incorrect Calculation
CVE-2025-5372		 CWE-682 Low
No
No
 - 14.08.2025 SB2025081494
SB2025081495
SB2025081532
and 21 more
#VU114026 - Resource exhaustion
CVE-2025-55163		 CWE-400 Medium
No
No
 - 13.08.2025 SB2025081378
SB2025081948
SB2025081949
and 70 more
#VU113738 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2025-8194		 CWE-835 Medium
No
No
 - 07.08.2025 SB2025080731
SB2025080738
SB2025080739
and 93 more
#VU104138 - Improper Link Resolution Before File Access ('Link Following')
CVE-2024-45339		 CWE-59 Low
No
No
 - 21.02.2025 SB2025022137
SB2025022138
SB2025022141
and 35 more
#VU103980 - Resource exhaustion
CVE-2024-12133		 CWE-400 Medium
No
No
 - 14.02.2025 SB2025021428
SB2025021429
SB2025021430
and 78 more
#VU101363 - Improper input validation
CVE-2024-46901		 CWE-20 Medium
No
No
 - 09.12.2024 SB2024120959
SB2024121264
SB2024121357
and 6 more


Showing elements 21 - 40 out of 145