Known vulnerabilities in Communications Unified Assurance - page 6

Vendor: Oracle
Software: Communications Unified Assurance
Software CPE: cpe:2.3:a:oracle:communications_unified_assurance:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 145
Public exploits: 22
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Communications Unified Assurance Communications Unified Assurance is affected by 145 known vulnerabilities: 5 critical, 27 high, 88 medium, 25 low Critical High Medium Low

Vulnerabilities (145)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU98025 - Resource exhaustion
CVE-2024-47554		 CWE-400 Medium
No
No
 - 03.10.2024 SB2024100352
SB2024100421
SB2024101007
and 132 more
#VU97574 - Uncontrolled Recursion
CVE-2024-7254		 CWE-674 Medium
No
No
 - 19.09.2024 SB2024091904
SB2024100103
SB2024101050
and 90 more
#VU96945 - Resource exhaustion
CVE-2024-7592		 CWE-400 Medium
No
No
 - 09.09.2024 SB2024090916
SB2024090917
SB2024090918
and 72 more
#VU96899 - Integer overflow
CVE-2024-45492		 CWE-190 High
No
No
 6.0.5 05.09.2024 SB20240905100
SB20240905101
SB20240905102
and 108 more
#VU94793 - Uncontrolled Search Path Element
CVE-2024-41817		 CWE-427 Low
No
No
 6.0.5 28.07.2024 SB2024072801
SB20241015149
SB2025012194
and 1 more
#VU94503 - Server-Side Request Forgery (SSRF)
CVE-2024-40898		 CWE-918 High
Available
No
 6.0.5 17.07.2024 SB20240717136
SB2024071896
SB2024081362
and 13 more
#VU91109 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-5585		 CWE-78 Medium
No
No
 6.0.5 05.06.2024 SB2024060501
SB2024060502
SB2024060503
and 8 more
#VU88153 - Resource exhaustion
CVE-2024-27316		 CWE-400 Medium
Available
No
 - 04.04.2024 SB2024040458
SB2024040502
SB2024040545
and 51 more
#VU87510 - Improper input validation
CVE-2024-24549		 CWE-20 Medium
Available
No
 6.0.5 13.03.2024 SB2024031386
SB2024031879
SB2024031880
and 64 more
#VU87326 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-24786		 CWE-835 Medium
No
No
 - 11.03.2024 SB2024031115
SB2024031435
SB2024031555
and 134 more
#VU82248 - Out-of-bounds read
CVE-2023-31122		 CWE-125 Medium
No
No
 - 19.10.2023 SB2023101942
SB2023101960
SB2023102101
and 43 more
#VU81803 - Exposed Dangerous Method or Function
CVE-2023-42794		 CWE-749 Medium
No
No
 - 10.10.2023 SB2023101084
SB2023101286
SB2023111528
and 22 more
#VU77622 - Exposure of sensitive information to an unauthorized actor
CVE-2023-34981		 CWE-200 Medium
No
No
 6.0.3 22.06.2023 SB2023062241
SB2023070714
SB2023071901
and 24 more
#VU77112 - Use of Insufficiently Random Values
CVE-2023-3247		 CWE-330 Medium
No
No
 - 09.06.2023 SB2023060919
SB2023061105
SB2023061516
and 24 more
#VU75562 - Improper input validation
CVE-2023-20861		 CWE-20 Medium
No
No
 - 27.04.2023 SB2023042742
SB2023042746
SB2023042832
and 61 more
#VU72427 - Allocation of Resources Without Limits or Throttling
CVE-2023-24998		 CWE-770 Medium
Available
No
 5.5.17 20.02.2023 SB2023022046
SB2023022047
SB2023030917
and 202 more
#VU71288 - Improper input validation
CVE-2023-21830		 CWE-20 Medium
No
No
 - 17.01.2023 SB2023011784
SB2023011785
SB2023012377
and 112 more
#VU68866 - Improper Authorization
CVE-2022-31692		 CWE-285 High
No
No
 - 01.11.2022 SB2022110101
SB2022121119
SB2023011162
and 28 more
#VU59924 - Improper input validation
CVE-2021-37137		 CWE-20 Medium
No
No
 6.0.4 23.01.2022 SB2022012310
SB2022012745
SB2022012753
and 43 more
#VU53000 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-29489		 CWE-79 Low
No
No
 - 10.05.2021 SB2021051010
SB2022080802
SB2023053119
and 2 more


Showing elements 101 - 120 out of 145