Known vulnerabilities in Oracle Communications IP Service Activator

Vendor: Oracle
Software: Oracle Communications IP Service Activator
Software CPE: cpe:2.3:a:oracle:ip_service_activator:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 11
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Communications IP Service Activator Oracle Communications IP Service Activator is affected by 11 known vulnerabilities: 2 high, 7 medium, 2 low Critical High Medium Low

Vulnerabilities (11)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU120231 - Improper Validation of Certificate with Host Mismatch
CVE-2025-68161		 CWE-297 Medium
No
No
 - 22.12.2025 -
#VU113607 - Uncontrolled Recursion
CVE-2025-48924		 CWE-674 Medium
No
No
 - 04.08.2025 -
#VU98025 - Resource exhaustion
CVE-2024-47554		 CWE-400 Medium
No
No
 - 03.10.2024 -
#VU86623 - Use After Free
CVE-2024-23807		 CWE-416 High
No
No
 - 20.02.2024 -
#VU83515 - Integer overflow
CVE-2023-37536		 CWE-190 Medium
No
No
 - 27.11.2023 -
#VU75225 - Information Exposure Through Timing Discrepancy
CVE-2020-35168		 CWE-208 Low
No
No
 - 18.04.2023 -
#VU70441 - Insufficient Verification of Data Authenticity
CVE-2021-37533		 CWE-345 Low
No
No
 - 20.12.2022 -
#VU59098 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44832		 CWE-94 Medium
No
No
 - 28.12.2021 -
#VU55044 - Improper input validation
CVE-2021-2351		 CWE-20 High
No
No
 - 20.07.2021 -
#VU21465 - Out-of-bounds read
CVE-2018-11058		 CWE-125 Medium
No
No
 - 01.10.2019 -
#VU19595 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-13990		 CWE-611 Medium
No
No
 - 01.08.2019 -