Known vulnerabilities in Oracle Communications Core Session Manager

Vendor: Oracle
Software: Oracle Communications Core Session Manager
Software CPE: cpe:2.3::oracle:oracle_communications_core_session_manager:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 4
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Communications Core Session Manager Oracle Communications Core Session Manager is affected by 4 known vulnerabilities: 1 critical, 1 high, 2 medium Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU107896 - Integer overflow
CVE-2025-23016		 CWE-190 Critical
No
No
 - 24.04.2025 SB2025042402
SB2025050991
SB2025053036
and 11 more
#VU89709 - Memory corruption
CVE-2024-33602		 CWE-119 Medium
No
No
 - 21.05.2024 SB2024052147
SB2024052148
SB2024052305
and 91 more
#VU66153 - Heap-based Buffer Overflow
CVE-2022-37434		 CWE-122 High
Available
No
 - 07.08.2022 SB2022080705
SB2022081833
SB2022081851
and 154 more
#VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-0778		 CWE-835 Medium
Available
No
 - 15.03.2022 SB2022031520
SB2022031522
SB2022031611
and 238 more