Known vulnerabilities in Oracle Communications Unified Inventory Management

Vendor: Oracle
Software: Oracle Communications Unified Inventory Management
Software CPE: cpe:2.3:a:oracle:unified_inventory:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 72
Public exploits: 9
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Communications Unified Inventory Management Oracle Communications Unified Inventory Management is affected by 72 known vulnerabilities: 1 critical, 10 high, 50 medium, 11 low Critical High Medium Low

Vulnerabilities (72)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU122299 - Integer overflow
CVE-2026-0861		 CWE-190 High
No
No
 - 04.02.2026 -
#VU121709 - Improper input validation
CVE-2025-26333		 CWE-20 Medium
No
No
 - 20.01.2026 -
#VU120231 - Improper Validation of Certificate with Host Mismatch
CVE-2025-68161		 CWE-297 Medium
No
No
 - 22.12.2025 -
#VU119230 - Allocation of Resources Without Limits or Throttling
CVE-2025-66418		 CWE-770 Medium
No
No
 - 05.12.2025 -
#VU116142 - Uncontrolled Recursion
CVE-2025-53864		 CWE-674 Medium
No
No
 - 26.09.2025 -
#VU115751 - Resource exhaustion
CVE-2025-59375		 CWE-400 Medium
No
No
 - 17.09.2025 -
#VU115138 - Out-of-bounds read
CVE-2025-9086		 CWE-125 Low
No
No
 - 10.09.2025 -
#VU114316 - Resource exhaustion
CVE-2025-5115		 CWE-400 Medium
No
No
 - 21.08.2025 -
#VU114026 - Resource exhaustion
CVE-2025-55163		 CWE-400 Medium
No
No
 - 13.08.2025 -
#VU113738 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2025-8194		 CWE-835 Medium
No
No
 - 07.08.2025 -
#VU113607 - Uncontrolled Recursion
CVE-2025-48924		 CWE-674 Medium
No
No
 - 04.08.2025 -
#VU113187 - Double Free
CVE-2025-8058		 CWE-415 High
No
No
 - 24.07.2025 -
#VU112994 - NULL Pointer Dereference
CVE-2025-32990		 CWE-476 Low
No
No
 - 16.07.2025 -
#VU111900 - Out-of-bounds read
CVE-2025-5318		 CWE-125 Medium
No
No
 - 24.06.2025 -
#VU111223 - Type confusion
CVE-2025-49796		 CWE-843 Medium
No
No
 - 17.06.2025 -
#VU111165 - Improper Access Control
CVE-2025-48734		 CWE-284 Medium
No
No
 - 16.06.2025 -
#VU106082 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-27553		 CWE-22 Medium
No
No
 - 27.03.2025 -
#VU101829 - Improper Authentication
CVE-2024-56128		 CWE-287 Medium
No
No
 - 18.12.2024 -
#VU100780 - Exposure of sensitive information to an unauthorized actor
CVE-2024-31141		 CWE-200 Medium
No
No
 - 21.11.2024 -
#VU98025 - Resource exhaustion
CVE-2024-47554		 CWE-400 Medium
No
No
 - 03.10.2024 -


Showing elements 1 - 20 out of 72