Known vulnerabilities in Oracle Communications MetaSolv Solution

Known vulnerabilities in Oracle Communications MetaSolv Solution

Vendor: Oracle

Software: Oracle Communications MetaSolv Solution

Software CPE: cpe:2.3:a:oracle:oracle_communications_metasolv_solution:*:*:*:*:*:*:*:*

Website: https://www.oracle.com

Total vulnerabilities: 15

Public exploits: 1

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (15)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU111165 - Improper Access Control CVE-2025-48734	CWE-284	Medium	No	No	-	16.06.2025	SB2025061643 SB2025061644 SB2025061645 and 141 more
#VU98498 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2024-28168	CWE-611	Medium	No	No	-	14.10.2024	SB2024101462 SB2024101465 SB2024112829 and 18 more
#VU98025 - Resource exhaustion CVE-2024-47554	CWE-400	Medium	No	No	-	03.10.2024	SB2024100352 SB2024100421 SB2024101007 and 132 more
#VU83515 - Integer overflow CVE-2023-37536	CWE-190	Medium	No	No	-	27.11.2023	SB2023112767 SB2023112803 SB2023112809 and 28 more
#VU69809 - Out-of-bounds write CVE-2022-42920	CWE-787	High	No	No	-	01.12.2022	SB2022120151 SB2022120154 SB2022120628 and 56 more
#VU67585 - Server-Side Request Forgery (SSRF) CVE-2022-40146	CWE-918	Medium	Available	No	-	22.09.2022	SB2022092232 SB2023011763 SB2023011838 and 21 more
#VU60114 - Integer overflow CVE-2022-23990	CWE-190	High	No	No	-	28.01.2022	SB2022012504 SB2022012804 SB2022020902 and 46 more
#VU59965 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-23437	CWE-835	Medium	No	No	-	25.01.2022	SB2022012503 SB2022041946 SB2022042249 and 92 more
#VU59098 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44832	CWE-94	Medium	No	No	-	28.12.2021	SB2021122816 SB2021123002 SB2022010601 and 197 more
#VU55044 - Improper input validation CVE-2021-2351	CWE-20	High	No	No	-	20.07.2021	SB2021072053 SB2022011824 SB2022011825 and 110 more
#VU52501 - Server-Side Request Forgery (SSRF) CVE-2020-11987	CWE-918	Medium	No	No	-	23.04.2021	SB2021042315 SB2021042316 SB2021042514 and 32 more
#VU52252 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2021-29425	CWE-22	Low	No	No	-	15.04.2021	SB2021041510 SB2021081922 SB2021093016 and 121 more
#VU29068 - Server-Side Request Forgery (SSRF) CVE-2019-17566	CWE-918	Medium	No	No	-	16.06.2020	SB2020061613 SB2020062304 SB2020072310 and 23 more
#VU27924 - Incorrect Default Permissions CVE-2020-1945	CWE-276	Low	No	No	-	15.05.2020	SB2020051501 SB2020052114 SB2020060205 and 48 more
#VU20844 - Protection Mechanism Failure CVE-2019-10086	CWE-693	Low	No	No	-	04.09.2019	SB2019090405 SB2019090406 SB2019121902 and 112 more