Known vulnerabilities in Oracle Communications Unified Session Manager

Vendor: Oracle
Software: Oracle Communications Unified Session Manager
Software CPE: cpe:2.3::oracle:oracle_communications_unified_session_manager:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 6
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Communications Unified Session Manager Oracle Communications Unified Session Manager is affected by 6 known vulnerabilities: 1 high, 3 medium, 2 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-0778		 CWE-835 Medium
Available
No
 - 15.03.2022 SB2022031520
SB2022031522
SB2022031611
and 238 more
#VU56064 - Out-of-bounds read
CVE-2021-3712		 CWE-125 Medium
No
No
 - 24.08.2021 SB2021082414
SB2021082508
SB2021082510
and 142 more
#VU48896 - NULL Pointer Dereference
CVE-2020-1971		 CWE-476 Medium
Available
No
 - 08.12.2020 SB2020120852
SB2020120903
SB2020120905
and 91 more
#VU17860 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2019-1559		 CWE-327 Low
No
No
 - 26.02.2019 SB2019022607
SB2019022802
SB2019022809
and 50 more
#VU13325 - Improper input validation
CVE-2018-0732		 CWE-20 Low
No
No
 - 12.06.2018 SB2018061305
SB2018070906
SB2018073005
and 54 more
#VU639 - Improper Access Control
CVE-2016-2107		 CWE-284 High
Available
No
 - 23.09.2016 SB2016050504
SB2016061413
SB2016050514
and 19 more