Known vulnerabilities in Oracle Communications Convergent Charging Controller
Vendor:
Oracle
Software CPE:
cpe:2.3:a:oracle:oracle_communications_convergent_charging_controller:*:*:*:*:*:*:*:*
Website:
https://www.oracle.com
Total vulnerabilities:
17
Public exploits:
4
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (17)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU113156 - Memory corruption CVE-2025-6965 |
CWE-119 | Medium | - | 22.07.2025 | - | ||
| #VU112146 - Server-Side Request Forgery (SSRF) CVE-2025-27817 |
CWE-918 | High | - | 03.07.2025 | - | ||
| #VU101829 - Improper Authentication CVE-2024-56128 |
CWE-287 | Medium | - | 18.12.2024 | - | ||
| #VU87160 - Use After Free CVE-2024-0232 |
CWE-416 | Medium | - | 06.03.2024 | - | ||
| #VU86623 - Use After Free CVE-2024-23807 |
CWE-416 | High | - | 20.02.2024 | - | ||
| #VU83515 - Integer overflow CVE-2023-37536 |
CWE-190 | Medium | - | 27.11.2023 | - | ||
| #VU81728 - Resource exhaustion CVE-2023-44487 |
CWE-400 | High | - | 10.10.2023 | - | ||
| #VU77573 - Resource exhaustion CVE-2023-34462 |
CWE-400 | Medium | - | 20.06.2023 | - | ||
| #VU72128 - Improper Verification of Cryptographic Signature CVE-2022-31123 |
CWE-347 | Medium | - | 11.02.2023 | - | ||
| #VU70528 - Security Features CVE-2022-46908 |
CWE-254 | Low | - | 28.12.2022 | - | ||
| #VU70385 - Deserialization of Untrusted Data CVE-2022-1471 |
CWE-502 | High | - | 15.12.2022 | - | ||
| #VU70118 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-41881 |
CWE-835 | Medium | - | 12.12.2022 | - | ||
| #VU67414 - Improper Validation of Array Index CVE-2022-35737 |
CWE-129 | Medium | - | 15.09.2022 | - | ||
| #VU59098 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44832 |
CWE-94 | Medium | - | 28.12.2021 | - | ||
| #VU55044 - Improper input validation CVE-2021-2351 |
CWE-20 | High | - | 20.07.2021 | - | ||
| #VU48979 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2020-25649 |
CWE-611 | Medium | - | 03.12.2020 | - | ||
| #VU24140 - Use After Free CVE-2018-1311 |
CWE-416 | High | - | 08.01.2020 | - |