Known vulnerabilities in Oracle Communications Operations Monitor

Vendor: Oracle
Software: Oracle Communications Operations Monitor
Software CPE: cpe:2.3:a:oracle:oracle_communications_operations_monitor:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 55
Public exploits: 10
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Communications Operations Monitor Oracle Communications Operations Monitor is affected by 55 known vulnerabilities: 3 critical, 5 high, 40 medium, 7 low Critical High Medium Low

Vulnerabilities (55)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124874 - Insufficient Verification of Data Authenticity
CVE-2026-26007		 CWE-345 Medium
No
No
 - 06.04.2026 SB2026040616
SB2026040617
SB2026040618
and 30 more
#VU123600 - Stack-based buffer overflow
CVE-2026-25968		 CWE-121 High
No
No
 - 06.03.2026 SB2026030565
SB2026030625
SB2026030639
and 10 more
#VU122335 - Acceptance of Extraneous Untrusted Data With Trusted Data
CVE-2026-1642		 CWE-349 Medium
No
No
 - 05.02.2026 SB2026020501
SB2026020505
SB2026020511
and 22 more
#VU120990 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2025-69223		 CWE-409 Medium
No
No
 - 06.01.2026 SB2026010643
SB2026012661
SB2026012855
and 15 more
#VU120607 - Stack-based buffer overflow
CVE-2025-68615		 CWE-121 Critical
No
No
 - 26.12.2025 SB20251226349
SB2026010785
SB2026011301
and 43 more
#VU119230 - Allocation of Resources Without Limits or Throttling
CVE-2025-66418		 CWE-770 Medium
No
No
 - 05.12.2025 SB2025120581
SB2025121208
SB2025121938
and 93 more
#VU116609 - Use After Free
CVE-2025-49844		 CWE-416 Medium
Available
No
 - 06.10.2025 SB2025100629
SB2025100633
SB2025100709
and 56 more
#VU116129 - Out-of-bounds read
CVE-2025-58050		 CWE-125 Medium
No
No
 - 26.09.2025 SB2025092615
SB2025092617
SB2025101331
and 3 more
#VU114417 - Integer overflow
CVE-2025-57803		 CWE-190 Medium
No
No
 - 26.08.2025 SB2025082604
SB2025090583
SB2025090584
and 17 more
#VU113069 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-53643		 CWE-444 Medium
No
No
 - 18.07.2025 SB2025071857
SB2025090377
SB2025091303
and 15 more
#VU105715 - Out-of-bounds write
CVE-2025-27363		 CWE-787 Critical
Available
Exploited
 - 14.03.2025 SB2025031402
SB2025031502
SB2025031750
and 97 more
#VU100601 - Missing release of memory after effective lifetime
CVE-2024-52303		 CWE-401 Medium
No
No
 - 19.11.2024 SB2024111901
SB2024121313
SB2025031422
and 4 more
#VU96667 - NULL Pointer Dereference
CVE-2024-8006		 CWE-476 Low
No
No
 - 02.09.2024 SB2024090219
SB2024090220
SB2024091147
and 13 more
#VU94793 - Uncontrolled Search Path Element
CVE-2024-41817		 CWE-427 Low
No
No
 - 28.07.2024 SB2024072801
SB20241015149
SB2025012194
and 1 more
#VU94063 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2024-3596		 CWE-327 Medium
Available
No
 - 10.07.2024 SB2024071018
SB2024071019
SB2024071020
and 114 more
#VU90156 - Security Features
CVE-2024-35195		 CWE-254 Low
No
No
 - 31.05.2024 SB2024053174
SB2024053188
SB2024053192
and 117 more
#VU89677 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-34064		 CWE-79 Medium
No
No
 - 20.05.2024 SB2024052067
SB2024052081
SB2024052082
and 83 more
#VU89167 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-1135		 CWE-444 Medium
No
No
 - 06.05.2024 SB2024050631
SB2024050632
SB2024050633
and 42 more
#VU89159 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-30251		 CWE-835 Medium
No
No
 - 06.05.2024 SB2024050618
SB2024061929
SB2024072506
and 12 more
#VU88063 - Memory corruption
CVE-2024-28219		 CWE-119 Medium
No
No
 - 03.04.2024 SB2024040318
SB2024040320
SB2024040844
and 28 more


Showing elements 1 - 20 out of 55