Known vulnerabilities in Oracle Communications Converged Application Server

Vendor: Oracle
Software: Oracle Communications Converged Application Server
Software CPE: cpe:2.3:a:oracle:oracle_communications_converged_application_server:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 10
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Communications Converged Application Server Oracle Communications Converged Application Server is affected by 10 known vulnerabilities: 1 critical, 3 high, 4 medium, 2 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU97732 - Insufficient Verification of Data Authenticity
CVE-2024-25638		 CWE-345 Medium
No
No
 - 26.09.2024 -
#VU71251 - Deserialization of Untrusted Data
CVE-2023-21890		 CWE-502 High
No
No
 - 17.01.2023 -
#VU52502 - Improper input validation
CVE-2020-27218		 CWE-20 Medium
No
No
 - 23.04.2021 -
#VU51876 - Resource exhaustion
CVE-2021-28165		 CWE-400 Medium
No
No
 - 01.04.2021 -
#VU28582 - Improper input validation
CVE-2016-1181		 CWE-20 High
No
No
 7.0.0.1 04.06.2020 SB20200114164
SB20200114165
SB2020071619
and 11 more
#VU27043 - Improper input validation
CVE-2018-1000180		 CWE-20 Medium
No
No
 7.0.0.1 21.04.2020 SB2020042107
SB2018092415
SB2021042531
and 17 more
#VU18848 - Deserialization of Untrusted Data
CVE-2019-2729		 CWE-502 Critical
Available
Exploited
 - 20.06.2019 -
#VU14150 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-9251		 CWE-79 Low
No
No
 7.0.0.1 31.07.2018 SB2018080106
SB2019011705
SB2019100301
and 63 more
#VU831 - Deserialization of Untrusted Data
CVE-2015-3253		 CWE-502 High
No
No
 - 11.10.2016 -
#VU193 - Exposure of sensitive information to an unauthorized actor
CVE-2016-0635		 CWE-200 Low
No
No
 7.0.0.1 21.07.2016 SB2019011707
SB2019011529
SB20190115104