Communications Converged Application Server (Oracle) - vulnerabilities (CVEs)
16 CVEs, 0 in the last 30 days, 14 known versions, newest CVE from 2026-07-21. Vendor: Oracle.
CVEs of Communications Converged Application Server
- CVE-2026-61226 - CVSS 7.5 (high), 2026-07-21: Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: RTP Proxy). The supported version that is…
- CVE-2026-61225 - CVSS 8.1 (high), 2026-07-21: Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: Core). Supported versions that are…
- CVE-2026-61224 - CVSS 8 (high), 2026-07-21: Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: Security). The supported version that is…
- CVE-2026-61223 - CVSS 9 (critical), 2026-07-21: Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: Security). Supported versions that are…
- CVE-2023-21890 - CVSS 9.8 (critical), 2023-01-18: Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: Core). Supported versions that are…
- CVE-2019-2725 - CVSS 9.8 (critical), 2019-04-26: Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are…
- CVE-2018-3246 - CVSS 7.5 (high), 2018-10-17: Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). Supported versions that are affected are…
- CVE-2018-1000613 - CVSS 9.8 (critical), 2018-07-09: Legion of the Bouncy Castle Legion of the Bouncy Castle Java Cryptography APIs 1.58 up to but not including 1.60 contains a CWE-470: Use of…
- CVE-2018-1000180 - CVSS 7.5 (high), 2018-06-05: Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier have a flaw in the Low-level interface to RSA key pair generator, specifically RSA Key…
- CVE-2018-1258 - CVSS 8.8 (high), 2018-05-11: Spring Framework version 5.0.5 when used in combination with any versions of Spring Security contains an authorization bypass when using method security. An…
- CVE-2018-1257 - CVSS 6.5 (medium), 2018-05-11: Spring Framework, versions 5.0.x prior to 5.0.6, versions 4.3.x prior to 4.3.17, and older unsupported versions allows applications to expose STOMP over…
- CVE-2018-1275 - CVSS 9.8 (critical), 2018-04-11: Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.16 and older unsupported versions, allow applications to expose STOMP over…
- CVE-2018-1270 - CVSS 9.8 (critical), 2018-04-06: Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to expose STOMP over…
- CVE-2018-1272 - CVSS 7.5 (high), 2018-04-06: Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, provide client-side support for multipart…
- CVE-2018-1271 - CVSS 5.9 (medium), 2018-04-06: Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to configure Spring MVC to…
- CVE-2015-9251 - CVSS 6.1 (medium), 2018-01-18: jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing…
