Known vulnerabilities in Oracle Communications Instant Messaging Server - page 3

Vendor: Oracle
Software: Oracle Communications Instant Messaging Server
Software CPE: cpe:2.3:a:oracle:oracle_communications_messaging_server:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 61
Public exploits: 7
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Communications Instant Messaging Server Oracle Communications Instant Messaging Server is affected by 61 known vulnerabilities: 1 critical, 13 high, 41 medium, 6 low Critical High Medium Low

Vulnerabilities (61)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU52252 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-29425		 CWE-22 Low
No
No
 - 15.04.2021 -
#VU51796 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-28657		 CWE-835 Medium
No
No
 - 30.03.2021 -
#VU49857 - Improper input validation
CVE-2020-13954		 CWE-20 Medium
No
No
 - 20.01.2021 -
#VU49086 - Comparison using wrong factors
CVE-2020-28052		 CWE-1025 High
Available
No
 - 18.12.2020 -
#VU29128 - Deserialization of Untrusted Data
CVE-2020-14195		 CWE-502 High
Available
No
 - 18.06.2020 -
#VU28773 - Use After Free
CVE-2020-13871		 CWE-416 High
No
No
 - 07.06.2020 -
#VU28194 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-0228		 CWE-611 Medium
No
No
 - 24.05.2020 -
#VU28158 - Deserialization of Untrusted Data
CVE-2020-9484		 CWE-502 High
Available
No
 - 21.05.2020 -
#VU27513 - Resource exhaustion
CVE-2020-11612		 CWE-400 Medium
No
No
 - 04.05.2020 -
#VU27487 - Improper Certificate Validation
CVE-2020-9488		 CWE-295 Low
No
No
 - 04.05.2020 -
#VU34420 - Missing release of memory after effective lifetime
CVE-2020-9489		 CWE-401 Medium
No
No
 - 27.04.2020 -
#VU26470 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-1951		 CWE-835 Medium
No
No
 - 31.03.2020 -
#VU25830 - Deserialization of Untrusted Data
CVE-2020-9546		 CWE-502 High
No
No
 - 09.03.2020 -
#VU25502 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-1938		 CWE-22 High
Available
Exploited
 - 21.02.2020 -
#VU24494 - Improper input validation
CVE-2019-10088		 CWE-20 High
No
No
 - 22.01.2020 -
#VU20992 - Resource Management Errors
CVE-2019-10072		 CWE-399 Medium
No
No
 - 10.09.2019 -
#VU19933 - Permissions, Privileges, and Access Controls
CVE-2019-14379		 CWE-264 High
No
No
 - 05.08.2019 -
#VU16676 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2018-17197		 CWE-835 Low
No
No
 - 22.12.2018 -
#VU12127 - Deserialization of Untrusted Data
CVE-2017-5645		 CWE-502 High
No
No
 - 24.04.2018 -
#VU10706 - Permissions, Privileges, and Access Controls
CVE-2018-1305		 CWE-264 Low
No
No
 - 26.02.2018 -


Showing elements 41 - 60 out of 61