Known vulnerabilities in Communications Unified Assurance - page 3

Vendor: Oracle
Software: Communications Unified Assurance
Software CPE: cpe:2.3:a:oracle:communications_unified_assurance:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 145
Public exploits: 22
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Communications Unified Assurance Communications Unified Assurance is affected by 145 known vulnerabilities: 5 critical, 27 high, 88 medium, 25 low Critical High Medium Low

Vulnerabilities (145)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU119149 - Improper Neutralization of Server-Side Includes (SSI) Within a Web Page
CVE-2025-58098		 CWE-97 Low
Available
No
 - 04.12.2025 SB2025120441
SB2025121923
SB2025121940
and 47 more
#VU118777 - Heap-based Buffer Overflow
CVE-2025-65018		 CWE-122 Critical
Available
No
 - 26.11.2025 SB2025112638
SB2025112639
SB2025112819
and 45 more
#VU117440 - Improper input validation
CVE-2024-50609		 CWE-20 Low
No
No
 - 22.10.2025 SB2025102236
#VU116142 - Uncontrolled Recursion
CVE-2025-53864		 CWE-674 Medium
No
No
 - 26.09.2025 SB2025092630
SB2025092631
SB2025100301
and 27 more
#VU114392 - Improper Handling of Unexpected Data Type
CVE-2025-7339		 CWE-241 Low
No
No
 - 22.08.2025 SB2025082222
SB2025091525
SB2025091621
and 18 more
#VU114385 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2025-54988		 CWE-611 Medium
Available
No
 - 22.08.2025 SB2025082219
SB2025083007
SB2025083008
and 31 more
#VU114024 - Resource exhaustion
CVE-2025-48989		 CWE-400 Medium
No
No
 - 13.08.2025 SB2025081375
SB2025081376
SB20250820127
and 49 more
#VU113672 - Unchecked Return Value
CVE-2025-54571		 CWE-252 Medium
No
No
 - 06.08.2025 SB2025080617
SB20250816115
SB20250816119
and 40 more
#VU113607 - Uncontrolled Recursion
CVE-2025-48924		 CWE-674 Medium
No
No
 - 04.08.2025 SB2025080422
SB2025080423
SB2025080427
and 178 more
#VU113187 - Double Free
CVE-2025-8058		 CWE-415 High
No
No
 - 24.07.2025 SB2025072408
SB2025072511
SB2025072512
and 59 more
#VU113185 - Expected Behavior Violation
CVE-2025-54090		 CWE-440 Medium
No
No
 - 23.07.2025 SB2025072350
SB2025080808
SB2025081113
and 9 more
#VU113118 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-27210		 CWE-22 Low
Available
No
 - 22.07.2025 SB2025072233
SB2025082103
SB2025091525
and 6 more
#VU112890 - Inefficient Regular Expression Complexity
CVE-2025-5889		 CWE-1333 Low
No
No
 - 15.07.2025 SB2025071511
SB2025071512
SB2025071513
and 33 more
#VU112153 - Improper input validation
CVE-2024-35164		 CWE-20 Medium
No
No
 - 03.07.2025 SB2025070347
SB2025070348
SB2025070349
and 5 more
#VU112106 - Memory corruption
CVE-2025-52999		 CWE-119 Medium
No
No
 - 02.07.2025 SB2025070257
SB2025070261
SB2025070262
and 43 more
#VU111989 - Resource exhaustion
CVE-2025-46727		 CWE-400 Medium
No
No
 - 27.06.2025 SB2025062709
SB2025062710
SB2025062711
and 24 more
#VU111900 - Out-of-bounds read
CVE-2025-5318		 CWE-125 Medium
No
No
 - 24.06.2025 SB2025062451
SB2025062454
SB20250704157
and 61 more
#VU110191 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2025-5399		 CWE-835 Low
No
No
 - 04.06.2025 SB2025060430
SB2025060503
SB2025061212
and 10 more
#VU99975 - Authentication Bypass by Spoofing
CVE-2024-51504		 CWE-290 High
No
No
 - 06.11.2024 SB2024110667
SB2024121231
SB2024122015
and 12 more
#VU96667 - NULL Pointer Dereference
CVE-2024-8006		 CWE-476 Low
No
No
 - 02.09.2024 SB2024090219
SB2024090220
SB2024091147
and 13 more


Showing elements 41 - 60 out of 145