Known vulnerabilities in Oracle Communications Network Analytics Data Director

Vendor: Oracle
Software: Oracle Communications Network Analytics Data Director
Software CPE: cpe:2.3:a:oracle:oracle_communications_network_analytics_data_director:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 51
Public exploits: 7
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Communications Network Analytics Data Director Oracle Communications Network Analytics Data Director is affected by 51 known vulnerabilities: 1 critical, 7 high, 37 medium, 6 low Critical High Medium Low

Vulnerabilities (51)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU115751 - Resource exhaustion
CVE-2025-59375		 CWE-400 Medium
No
No
 - 17.09.2025 SB2025091783
SB2025091789
SB2025091790
and 109 more
#VU114026 - Resource exhaustion
CVE-2025-55163		 CWE-400 Medium
No
No
 - 13.08.2025 SB2025081378
SB2025081948
SB2025081949
and 71 more
#VU113156 - Memory corruption
CVE-2025-6965		 CWE-119 Medium
No
No
 - 22.07.2025 SB2025072254
SB2025072807
SB2025072890
and 100 more
#VU112994 - NULL Pointer Dereference
CVE-2025-32990		 CWE-476 Low
No
No
 - 16.07.2025 SB20250716122
SB20250716123
SB20250716124
and 79 more
#VU112890 - Inefficient Regular Expression Complexity
CVE-2025-5889		 CWE-1333 Low
No
No
 - 15.07.2025 SB2025071511
SB2025071512
SB2025071513
and 33 more
#VU112440 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2025-3576		 CWE-327 Medium
No
No
 - 07.07.2025 SB2025070764
SB2025070769
SB2025070770
and 29 more
#VU111966 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-4517		 CWE-22 High
Available
No
 - 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 77 more
#VU111900 - Out-of-bounds read
CVE-2025-5318		 CWE-125 Medium
No
No
 - 24.06.2025 SB2025062451
SB2025062454
SB20250704157
and 61 more
#VU111162 - Resource exhaustion
CVE-2025-48976		 CWE-400 Medium
Available
No
 - 16.06.2025 SB2025061634
SB2025061635
SB2025061927
and 157 more
#VU106926 - Resource Management Errors
CVE-2024-57699		 CWE-399 Medium
No
No
 - 03.04.2025 SB2025040317
SB2025040325
SB2025040326
and 64 more
#VU105900 - Memory corruption
CVE-2025-25724		 CWE-119 High
No
No
 - 20.03.2025 SB2025032034
SB2025032045
SB2025032169
and 25 more
#VU105715 - Out-of-bounds write
CVE-2025-27363		 CWE-787 Critical
Available
Exploited
 - 14.03.2025 SB2025031402
SB2025031502
SB2025031750
and 97 more
#VU103980 - Resource exhaustion
CVE-2024-12133		 CWE-400 Medium
No
No
 - 14.02.2025 SB2025021428
SB2025021429
SB2025021430
and 78 more
#VU100095 - Memory corruption
CVE-2024-47072		 CWE-119 Medium
No
No
 - 07.11.2024 SB20241107102
SB20241115126
SB2024112531
and 37 more
#VU99567 - Resource exhaustion
CVE-2024-49767		 CWE-400 Medium
No
No
 - 31.10.2024 SB2024103173
SB2024103176
SB2024110601
and 30 more
#VU99357 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-9287		 CWE-78 Low
No
No
 - 28.10.2024 SB2024102836
SB2024102838
SB20241101111
and 117 more
#VU97732 - Insufficient Verification of Data Authenticity
CVE-2024-25638		 CWE-345 Medium
No
No
 - 26.09.2024 SB2024092660
SB2024092665
SB2024100252
and 17 more
#VU97574 - Uncontrolled Recursion
CVE-2024-7254		 CWE-674 Medium
No
No
 - 19.09.2024 SB2024091904
SB2024100103
SB2024101050
and 90 more
#VU97209 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43796		 CWE-79 Medium
No
No
 - 12.09.2024 SB2024091250
SB2024091251
SB2024091252
and 52 more
#VU85267 - Covert Timing Channel
CVE-2023-5388		 CWE-385 Medium
No
No
 - 10.01.2024 SB2024011031
SB2024011042
SB2024011043
and 96 more


Showing elements 1 - 20 out of 51