Known vulnerabilities in Oracle Communications Network Analytics Data Director

Vendor: Oracle
Software: Oracle Communications Network Analytics Data Director
Software CPE: cpe:2.3:a:oracle:oracle_communications_network_analytics_data_director:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 51
Public exploits: 7
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Communications Network Analytics Data Director Oracle Communications Network Analytics Data Director is affected by 51 known vulnerabilities: 1 critical, 7 high, 37 medium, 6 low Critical High Medium Low

Vulnerabilities (51)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU115751 - Resource exhaustion
CVE-2025-59375		 CWE-400 Medium
No
No
 - 17.09.2025 -
#VU114026 - Resource exhaustion
CVE-2025-55163		 CWE-400 Medium
No
No
 - 13.08.2025 -
#VU113156 - Memory corruption
CVE-2025-6965		 CWE-119 Medium
No
No
 - 22.07.2025 -
#VU112994 - NULL Pointer Dereference
CVE-2025-32990		 CWE-476 Low
No
No
 - 16.07.2025 -
#VU112890 - Inefficient Regular Expression Complexity
CVE-2025-5889		 CWE-1333 Low
No
No
 - 15.07.2025 -
#VU112440 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2025-3576		 CWE-327 Medium
No
No
 - 07.07.2025 -
#VU111966 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-4517		 CWE-22 High
Available
No
 - 26.06.2025 -
#VU111900 - Out-of-bounds read
CVE-2025-5318		 CWE-125 Medium
No
No
 - 24.06.2025 -
#VU111162 - Resource exhaustion
CVE-2025-48976		 CWE-400 Medium
Available
No
 - 16.06.2025 -
#VU106926 - Resource Management Errors
CVE-2024-57699		 CWE-399 Medium
No
No
 - 03.04.2025 -
#VU105900 - Memory corruption
CVE-2025-25724		 CWE-119 High
No
No
 - 20.03.2025 -
#VU105715 - Out-of-bounds write
CVE-2025-27363		 CWE-787 Critical
Available
Exploited
 - 14.03.2025 -
#VU103980 - Resource exhaustion
CVE-2024-12133		 CWE-400 Medium
No
No
 - 14.02.2025 -
#VU100095 - Memory corruption
CVE-2024-47072		 CWE-119 Medium
No
No
 - 07.11.2024 -
#VU99567 - Resource exhaustion
CVE-2024-49767		 CWE-400 Medium
No
No
 - 31.10.2024 -
#VU99357 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-9287		 CWE-78 Low
No
No
 - 28.10.2024 -
#VU97732 - Insufficient Verification of Data Authenticity
CVE-2024-25638		 CWE-345 Medium
No
No
 - 26.09.2024 -
#VU97574 - Uncontrolled Recursion
CVE-2024-7254		 CWE-674 Medium
No
No
 - 19.09.2024 -
#VU97209 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43796		 CWE-79 Medium
No
No
 - 12.09.2024 -
#VU85267 - Covert Timing Channel
CVE-2023-5388		 CWE-385 Medium
No
No
 - 10.01.2024 -


Showing elements 1 - 20 out of 51