Known vulnerabilities in Oracle Communications WebRTC Session Controller

Known vulnerabilities in Oracle Communications WebRTC Session Controller

Vendor: Oracle

Software: Oracle Communications WebRTC Session Controller

Software CPE: cpe:2.3:a:oracle:oracle_communications_webrtc_session_controller:*:*:*:*:*:*:*:*

Website: https://www.oracle.com

Total vulnerabilities: 16

Public exploits: 2

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (16)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU82276 - Allocation of Resources Without Limits or Throttling CVE-2023-5072	CWE-770	Medium	No	No	-	20.10.2023	-
#VU77102 - Stack-based buffer overflow CVE-2022-45688	CWE-121	Medium	No	No	-	08.06.2023	-
#VU64152 - Deserialization of Untrusted Data CVE-2022-25647	CWE-502	Medium	No	No	-	10.06.2022	-
#VU60834 - Improper Control of Generation of Code ('Code Injection') CVE-2021-23450	CWE-94	High	No	No	-	23.02.2022	-
#VU59098 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44832	CWE-94	Medium	No	No	-	28.12.2021	-
#VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2021-45105	CWE-835	Medium	Available	No	-	18.12.2021	-
#VU28582 - Improper input validation CVE-2016-1181	CWE-20	High	No	No	7.2	04.06.2020	SB20200114164 SB20200114165 SB2020071619 and 11 more
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-11022	CWE-79	Low	Available	No	-	21.04.2020	-
#VU27043 - Improper input validation CVE-2018-1000180	CWE-20	Medium	No	No	7.2	21.04.2020	SB2020042107 SB2018092415 SB2021042531 and 17 more
#VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\') CVE-2019-11358	CWE-1321	Low	Available	No	-	28.03.2019	-
#VU14150 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2015-9251	CWE-79	Low	No	No	7.2	31.07.2018	SB2018080106 SB2019011705 SB2019100301 and 63 more
#VU13325 - Improper input validation CVE-2018-0732	CWE-20	Low	No	No	7.2	12.06.2018	SB2018061305 SB2018070906 SB2018073005 and 54 more
#VU13059 - Deserialization of Untrusted Data CVE-2018-8013	CWE-502	Low	No	No	7.2	30.05.2018	SB2018053011 SB2018060503 SB2019011705 and 16 more
#VU12799 - Heap-based Buffer Overflow CVE-2018-1000300	CWE-122	High	No	No	7.2	17.05.2018	SB2018051707 SB2018051809 SB2018051810 and 12 more
#VU12127 - Deserialization of Untrusted Data CVE-2017-5645	CWE-502	High	No	No	7.2	24.04.2018	SB2017040201 SB2019011707 SB2017090512 and 40 more
#VU32070 - Exposure of sensitive information to an unauthorized actor CVE-2017-0379	CWE-200	Medium	No	No	7.2	30.08.2017	SB2017083008 SB2017091920 SB2017091821 and 6 more