Known vulnerabilities in Oracle Communications Diameter Signaling Router

Vendor: Oracle
Software: Oracle Communications Diameter Signaling Router
Software CPE: cpe:2.3:a:oracle:oracle_communications_diameter_signaling_router:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 57
Public exploits: 14
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Communications Diameter Signaling Router Oracle Communications Diameter Signaling Router is affected by 57 known vulnerabilities: 3 critical, 9 high, 32 medium, 13 low Critical High Medium Low

Vulnerabilities (57)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU113738 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2025-8194		 CWE-835 Medium
No
No
 - 07.08.2025 SB2025080731
SB2025080738
SB2025080739
and 93 more
#VU113607 - Uncontrolled Recursion
CVE-2025-48924		 CWE-674 Medium
No
No
 - 04.08.2025 SB2025080422
SB2025080423
SB2025080427
and 178 more
#VU98025 - Resource exhaustion
CVE-2024-47554		 CWE-400 Medium
No
No
 - 03.10.2024 SB2024100352
SB2024100421
SB2024101007
and 132 more
#VU93732 - Resource Management Errors
CVE-2024-34750		 CWE-399 Medium
No
No
 - 03.07.2024 SB2024070346
SB20240711245
SB2024071542
and 56 more
#VU93519 - Out-of-bounds read
CVE-2024-37371		 CWE-125 Medium
No
No
 - 01.07.2024 SB2024070148
SB2024070491
SB2024070496
and 114 more
#VU92262 - Exposure of sensitive information to an unauthorized actor
CVE-2024-37891		 CWE-200 Low
No
No
 - 19.06.2024 SB2024061955
SB20240625146
SB2024062605
and 194 more
#VU89709 - Memory corruption
CVE-2024-33602		 CWE-119 Medium
No
No
 - 21.05.2024 SB2024052147
SB2024052148
SB2024052305
and 91 more
#VU89677 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-34064		 CWE-79 Medium
No
No
 - 20.05.2024 SB2024052067
SB2024052081
SB2024052082
and 83 more
#VU87685 - Resource exhaustion
CVE-2024-0450		 CWE-400 Medium
No
No
 - 21.03.2024 SB2024032107
SB2024032110
SB2024040848
and 80 more
#VU87509 - Resource exhaustion
CVE-2024-23672		 CWE-400 Medium
No
No
 - 13.03.2024 SB2024031386
SB2024032821
SB2024032824
and 49 more
#VU86623 - Use After Free
CVE-2024-23807		 CWE-416 High
No
No
 - 20.02.2024 SB2024022032
SB2024062836
SB2024071042
and 24 more
#VU84537 - Inadequate Encryption Strength
CVE-2023-48795		 CWE-326 Low
Available
No
 - 19.12.2023 SB2023121903
SB2023121905
SB2023121906
and 343 more
#VU83930 - NULL Pointer Dereference
CVE-2023-49083		 CWE-476 Medium
No
No
 - 06.12.2023 SB2023120655
SB2023120656
SB2023121440
and 63 more
#VU83900 - Exposure of sensitive information to an unauthorized actor
CVE-2023-46218		 CWE-200 Low
No
No
 - 06.12.2023 SB2023120612
SB2023120644
SB2023120661
and 87 more
#VU82690 - Deserialization of Untrusted Data
CVE-2023-46604		 CWE-502 Critical
Available
Exploited
 - 02.11.2023 SB2023110251
SB2023111311
SB2023112410
and 36 more
#VU81799 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-45648		 CWE-444 Medium
No
No
 - 10.10.2023 SB2023101084
SB2023101122
SB2023101123
and 47 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 - 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 650 more
#VU80637 - Heap-based Buffer Overflow
CVE-2023-4863		 CWE-122 Critical
Available
Exploited
 - 11.09.2023 SB2023091178
SB2023091245
SB2023091265
and 137 more
#VU79490 - Improper Certificate Validation
CVE-2023-38325		 CWE-295 Medium
No
No
 - 14.08.2023 SB2023081446
SB20230821188
SB20230821192
and 21 more
#VU77107 - Incorrect Default Permissions
CVE-2023-2976		 CWE-276 Low
No
No
 - 08.06.2023 SB2023060849
SB2023071712
SB2023072512
and 157 more


Showing elements 1 - 20 out of 57