Known vulnerabilities in Oracle Communications Pricing Design Center

Vendor: Oracle
Software: Oracle Communications Pricing Design Center
Software CPE: cpe:2.3:a:oracle:oracle_communications_pricing_design_center:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 34
Public exploits: 4
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Communications Pricing Design Center Oracle Communications Pricing Design Center is affected by 34 known vulnerabilities: 7 high, 18 medium, 9 low Critical High Medium Low

Vulnerabilities (34)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114026 - Resource exhaustion
CVE-2025-55163		 CWE-400 Medium
No
No
 - 13.08.2025 SB2025081378
SB2025081948
SB2025081949
and 71 more
#VU111900 - Out-of-bounds read
CVE-2025-5318		 CWE-125 Medium
No
No
 - 24.06.2025 SB2025062451
SB2025062454
SB20250704157
and 61 more
#VU103770 - Improper input validation
CVE-2025-24970		 CWE-20 Medium
No
No
 - 11.02.2025 SB2025021186
SB202502197190
SB2025030409
and 88 more
#VU98025 - Resource exhaustion
CVE-2024-47554		 CWE-400 Medium
No
No
 - 03.10.2024 SB2024100352
SB2024100421
SB2024101007
and 132 more
#VU82276 - Allocation of Resources Without Limits or Throttling
CVE-2023-5072		 CWE-770 Medium
No
No
 - 20.10.2023 SB2023102017
SB2023102018
SB2023113056
and 97 more
#VU82122 - Improper input validation
CVE-2023-35116		 CWE-20 Low
No
No
 - 17.10.2023 SB2023101771
SB20231018117
SB2023101925
and 45 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 - 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 651 more
#VU70385 - Deserialization of Untrusted Data
CVE-2022-1471		 CWE-502 High
Available
No
 - 15.12.2022 SB2022121539
SB2022121540
SB2022121928
and 124 more
#VU70119 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2022-41915		 CWE-113 Medium
No
No
 - 12.12.2022 SB2022121215
SB2023011210
SB2023013027
and 25 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003		 CWE-502 Medium
No
No
 - 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU67665 - Resource exhaustion
CVE-2022-25857		 CWE-400 Medium
No
No
 - 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 83 more
#VU62849 - Creation of Temporary File With Insecure Permissions
CVE-2022-24823		 CWE-378 Low
No
No
 12.0.0.7.0 09.05.2022 SB2022050902
SB2022063002
SB2022072013
and 55 more
#VU62503 - Improper input validation
CVE-2021-21275		 CWE-20 Low
No
No
 - 22.04.2022 SB2022042218
#VU61799 - Out-of-bounds write
CVE-2020-36518		 CWE-787 Medium
No
No
 - 01.04.2022 SB2022040113
SB2022040114
SB2022040115
and 147 more
#VU60367 - Security Features
CVE-2022-24329		 CWE-254 Medium
No
No
 - 08.02.2022 SB2022020805
SB2022042218
SB2022071957
and 13 more
#VU59098 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44832		 CWE-94 Medium
No
No
 - 28.12.2021 SB2021122816
SB2021123002
SB2022010601
and 197 more
#VU55044 - Improper input validation
CVE-2021-2351		 CWE-20 High
No
No
 - 20.07.2021 SB2021072053
SB2022011824
SB2022011825
and 110 more
#VU52252 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-29425		 CWE-22 Low
No
No
 - 15.04.2021 SB2021041510
SB2021081922
SB2021093016
and 121 more
#VU51836 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-21295		 CWE-444 Medium
No
No
 12.0.0.7.0 01.04.2021 SB2021040115
SB2021040626
SB2021050706
and 26 more
#VU50139 - Incorrect Default Permissions
CVE-2020-8908		 CWE-276 Low
No
No
 - 11.12.2020 SB2020121114
SB2021031707
SB2021042104
and 62 more


Showing elements 1 - 20 out of 34