Known vulnerabilities in Communications Unified Assurance - page 5

Vendor: Oracle
Software: Communications Unified Assurance
Software CPE: cpe:2.3:a:oracle:communications_unified_assurance:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 145
Public exploits: 22
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Communications Unified Assurance Communications Unified Assurance is affected by 145 known vulnerabilities: 5 critical, 27 high, 88 medium, 25 low Critical High Medium Low

Vulnerabilities (145)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU105485 - Improper input validation
CVE-2025-24813		 CWE-20 Critical
Available
Exploited
 - 10.03.2025 SB2025031069
SB2025031976
SB2025032642
and 48 more
#VU103770 - Improper input validation
CVE-2025-24970		 CWE-20 Medium
No
No
 - 11.02.2025 SB2025021186
SB202502197190
SB2025030409
and 88 more
#VU103291 - Improper input validation
CVE-2023-29408		 CWE-20 Medium
No
No
 - 24.01.2025 SB2025012464
#VU103223 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-23084		 CWE-22 Low
No
No
 - 22.01.2025 SB2025012252
SB2025012422
SB2025012423
and 11 more
#VU103109 - Resource exhaustion
CVE-2024-43709		 CWE-400 Medium
No
No
 - 21.01.2025 SB2025012117
SB2025041654
SB2025063009
#VU101974 - Deserialization of Untrusted Data
CVE-2024-52046		 CWE-502 High
No
No
 - 28.12.2024 SB2024122801
SB20250117140
SB2025020549
and 22 more
#VU100780 - Exposure of sensitive information to an unauthorized actor
CVE-2024-31141		 CWE-200 Medium
No
No
 - 21.11.2024 SB2024112150
SB2024120226
SB2024120331
and 34 more
#VU99614 - Improper input validation
CVE-2024-50602		 CWE-20 Medium
No
No
 - 01.11.2024 SB2024110155
SB2024110182
SB2024110534
and 98 more
#VU98796 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-38819		 CWE-22 Medium
Available
No
 - 17.10.2024 SB2024101781
SB2024112849
SB2024120331
and 54 more
#VU98024 - Improper input validation
CVE-2024-47561		 CWE-20 High
No
No
 - 03.10.2024 SB2024100351
SB2024100504
SB2024100984
and 36 more
#VU97209 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43796		 CWE-79 Medium
No
No
 - 12.09.2024 SB2024091250
SB2024091251
SB2024091252
and 52 more
#VU96997 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-40896		 CWE-611 High
No
No
 - 10.09.2024 SB2024091054
SB2024091056
SB2024091071
and 10 more
#VU96554 - Incorrect Default Permissions
CVE-2023-49582		 CWE-276 Low
No
No
 - 26.08.2024 SB2024082682
SB2024082937
SB2024082938
and 21 more
#VU92262 - Exposure of sensitive information to an unauthorized actor
CVE-2024-37891		 CWE-200 Low
No
No
 - 19.06.2024 SB2024061955
SB20240625146
SB2024062605
and 194 more
#VU90156 - Security Features
CVE-2024-35195		 CWE-254 Low
No
No
 - 31.05.2024 SB2024053174
SB2024053188
SB2024053192
and 117 more
#VU89677 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-34064		 CWE-79 Medium
No
No
 - 20.05.2024 SB2024052067
SB2024052081
SB2024052082
and 83 more
#VU87744 - Out-of-bounds write
CVE-2024-29133		 CWE-787 High
No
No
 - 22.03.2024 SB2024032169
SB2024032283
SB20240417122
and 40 more
#VU87551 - Exposure of sensitive information to an unauthorized actor
CVE-2024-28849		 CWE-200 Low
No
No
 - 15.03.2024 SB2024031508
SB2024031517
SB2024040365
and 59 more
#VU87328 - Improper Access Control
CVE-2024-1442		 CWE-284 Medium
No
No
 - 11.03.2024 SB2024031121
SB2024050135
SB2024081506
and 2 more
#VU85267 - Covert Timing Channel
CVE-2023-5388		 CWE-385 Medium
No
No
 - 10.01.2024 SB2024011031
SB2024011042
SB2024011043
and 96 more


Showing elements 81 - 100 out of 145