Oracle

Communications Converged Application Server

16 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9

CVE-2026-61223

  • EPSS 0.37%
  • Veröffentlicht 21.07.2026 22:18:53
  • Zuletzt bearbeitet 06.08.2026 15:23:50

Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: Security). Supported versions that are affected are 8.2 and 8.3. Difficult to exploit vulnerability allows unauthenticated attacker...

8

CVE-2026-61224

  • EPSS 0.35%
  • Veröffentlicht 21.07.2026 22:18:53
  • Zuletzt bearbeitet 06.08.2026 15:23:57

Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: Security). The supported version that is affected is 8.3. Difficult to exploit vulnerability allows high privileged attacker with n...

8.1

CVE-2026-61225

  • EPSS 0.37%
  • Veröffentlicht 21.07.2026 22:18:53
  • Zuletzt bearbeitet 19.08.2026 14:05:47

Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: Core). Supported versions that are affected are 8.2 and 8.3. Difficult to exploit vulnerability allows unauthenticated attacker wit...

7.5

CVE-2026-61226

  • EPSS 0.14%
  • Veröffentlicht 21.07.2026 22:18:53
  • Zuletzt bearbeitet 19.08.2026 14:07:40

Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: RTP Proxy). The supported version that is affected is 8.3. Difficult to exploit vulnerability allows high privileged attacker with ...

9.8

CVE-2023-21890

  • EPSS 0.84%
  • Veröffentlicht 18.01.2023 00:15:16
  • Zuletzt bearbeitet 21.11.2024 07:43:51

Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: Core). Supported versions that are affected are 7.1.0 and 8.0.0. Easily exploitable vulnerability allows unauthenticated attacker w...

9.8

CVE-2019-2725

Warnung Exploit
  • EPSS 99.96%
  • Veröffentlicht 26.04.2019 19:29:00
  • Zuletzt bearbeitet 12.08.2026 05:17:26

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with ...

7.5

CVE-2018-3246

  • EPSS 2.89%
  • Veröffentlicht 17.10.2018 01:31:26
  • Zuletzt bearbeitet 21.11.2024 04:05:31

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). Supported versions that are affected are 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker wit...

9.8

CVE-2018-1000613

  • EPSS 4.77%
  • Veröffentlicht 09.07.2018 20:29:00
  • Zuletzt bearbeitet 12.05.2025 17:37:16

Legion of the Bouncy Castle Legion of the Bouncy Castle Java Cryptography APIs 1.58 up to but not including 1.60 contains a CWE-470: Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in XMSS/XMSS^MT priv...

7.5

CVE-2018-1000180

  • EPSS 3.58%
  • Veröffentlicht 05.06.2018 13:29:00
  • Zuletzt bearbeitet 12.05.2025 17:37:16

Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier have a flaw in the Low-level interface to RSA key pair generator, specifically RSA Key Pairs generated in low-level API with added certainty may have less M-R tests than expected. T...

6.5

CVE-2018-1257

  • EPSS 3.24%
  • Veröffentlicht 11.05.2018 20:29:00
  • Zuletzt bearbeitet 21.11.2024 03:59:28

Spring Framework, versions 5.0.x prior to 5.0.6, versions 4.3.x prior to 4.3.17, and older unsupported versions allows applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A ...