Known vulnerabilities in Oracle Communications Element Manager
Vendor:
Oracle
Software:
Oracle Communications Element Manager
Software CPE:
cpe:2.3:a:oracle:oracle_communications_element_manager:*:*:*:*:*:*:*:*
Website:
https://www.oracle.com
Total vulnerabilities:
58
Public exploits:
22
Known exploited (KEV):
3
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (58)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU126719 - Improper input validation CVE-2026-23903 |
CWE-20 | Medium | - | 22.04.2026 | - | ||
| #VU122999 - Improper Authorization CVE-2026-24734 |
CWE-285 | Medium | - | 17.02.2026 | - | ||
| #VU117682 - Resource exhaustion CVE-2025-61795 |
CWE-400 | Medium | - | 27.10.2025 | - | ||
| #VU113607 - Uncontrolled Recursion CVE-2025-48924 |
CWE-674 | Medium | - | 04.08.2025 | - | ||
| #VU111165 - Improper Access Control CVE-2025-48734 |
CWE-284 | Medium | - | 16.06.2025 | - | ||
| #VU111162 - Resource exhaustion CVE-2025-48976 |
CWE-400 | Medium | - | 16.06.2025 | - | ||
| #VU111161 - Resource exhaustion CVE-2025-48988 |
CWE-400 | Medium | - | 16.06.2025 | - | ||
| #VU108769 - Resource exhaustion CVE-2025-27533 |
CWE-400 | Medium | - | 07.05.2025 | - | ||
| #VU105485 - Improper input validation CVE-2025-24813 |
CWE-20 | Critical | - | 10.03.2025 | - | ||
| #VU101245 - Integer overflow CVE-2024-47606 |
CWE-190 | High | - | 04.12.2024 | - | ||
| #VU98796 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2024-38819 |
CWE-22 | Medium | - | 17.10.2024 | - | ||
| #VU98516 - Server-Side Request Forgery (SSRF) CVE-2024-6763 |
CWE-918 | Medium | - | 14.10.2024 | - | ||
| #VU87567 - Server-Side Request Forgery (SSRF) CVE-2024-28752 |
CWE-918 | Medium | - | 15.03.2024 | - | ||
| #VU86625 - Resource exhaustion CVE-2024-26308 |
CWE-400 | Medium | - | 20.02.2024 | - | ||
| #VU84537 - Inadequate Encryption Strength CVE-2023-48795 |
CWE-326 | Low | - | 19.12.2023 | - | ||
| #VU83533 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2023-46589 |
CWE-444 | Medium | - | 28.11.2023 | - | ||
| #VU82690 - Deserialization of Untrusted Data CVE-2023-46604 |
CWE-502 | Critical | - | 02.11.2023 | - | ||
| #VU82248 - Out-of-bounds read CVE-2023-31122 |
CWE-125 | Medium | - | 19.10.2023 | - | ||
| #VU80089 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2023-41080 |
CWE-601 | Medium | - | 29.08.2023 | - | ||
| #VU77107 - Incorrect Default Permissions CVE-2023-2976 |
CWE-276 | Low | - | 08.06.2023 | - |
Showing elements 1 - 20 out of 58