Oracle Communications Converged Application Server vulnerabilities

• oracle communications converged application server Vulnerability in the Oracle Communications Converged Application Server product of Oracle... CVE-2026-61226 7.5 HighJuly 21, 2026
• oracle communications converged application server Vulnerability in the Oracle Communications Converged Application Server product of Oracle... CVE-2026-61225 8.1 HighJuly 21, 2026
• oracle communications converged application server Vulnerability in the Oracle Communications Converged Application Server product of Oracle... CVE-2026-61224 8.0 HighJuly 21, 2026
• oracle communications converged application server Vulnerability in the Oracle Communications Converged Application Server product of Oracle... CVE-2026-61223 9.0 CriticalJuly 21, 2026
• oracle communications converged application server Vulnerability in the Oracle Communications Converged Application Server product of Oracle... CVE-2023-21890 9.8 CriticalJanuary 17, 2023
• apache commons io, debian linux, netapp active iq unified manager +57 more +59 more Possible limited path traversal vulnerabily in Apache Commons IO CVE-2021-29425 Public exploitFix available EPSS 10.5% 4.8 MediumApril 13, 2021
• eclipse jetty, the eclipse foundation eclipse jetty, apache kafka +15 more +17 more Buffer not correctly recycled in Gzip Request inflation CVE-2020-27218 Fix available 4.8 MediumNovember 28, 2020
• eclipse jetty, the eclipse foundation eclipse jetty, apache beam +16 more +18 more Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2020-27216 Fix available 7.0 HighOctober 23, 2020
• hibernate hibernate-validator, netapp active iq unified manager, element +185 more +187 more The SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks CVE-2019-10219 Public exploitFix available 6.5 MediumNovember 8, 2019
• oracle weblogic server, agile product lifecycle management, communications converged application server +5 more +7 more Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent:... CVE-2019-2725 In KEVPublic exploit EPSS 100.0% 7.5 HighApril 26, 2019
• pivotal spring framework, debian linux, oracle agile product lifecycle management +37 more +39 more DoS Attack via Range Requests CVE-2018-15756 Fix available 7.5 HighOctober 18, 2018
• oracle weblogic server, banking platform, business process management suite +6 more +8 more Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent:... CVE-2018-3246 7.5 HighOctober 17, 2018
• bouncycastle bc-java, netapp oncommand workflow automation, opensuse leap +21 more +23 more Deserialization of Untrusted Data in Bouncy castle CVE-2018-1000613 Fix available 9.8 CriticalJuly 9, 2018
• bouncycastle bc-java, fips java api, debian linux +17 more +19 more Bouncy Castle has a flaw in the Low-level interface to RSA key pair generator CVE-2018-1000180 Fix available 7.5 HighJune 5, 2018
• pivotal spring framework, pivotal software spring security, netapp oncommand insight +39 more +41 more Spring Framework when used in combination with any versions of Spring Security contains an authorization bypass CVE-2018-1258 Fix available 8.8 HighMay 11, 2018
• pivotal spring framework, oracle agile product lifecycle management, application testing suite +27 more +29 more Denial of Service in org.springframework:spring-core CVE-2018-1257 Fix available 6.5 MediumMay 11, 2018
• spring by pivotal framework, vmware spring framework, oracle application testing suite +17 more +19 more Spring Framework has Improperly Implemented Security Check for Standard CVE-2018-1275 Fix available EPSS 57.7% 9.8 CriticalApril 11, 2018
• spring by pivotal framework, vmware spring framework, oracle application testing suite +23 more +25 more Possible privilege escalation in org.springframework:spring-core CVE-2018-1272 Fix available 7.5 HighApril 6, 2018
• spring by pivotal framework, vmware spring framework, oracle application testing suite +26 more +28 more Path Traversal in org.springframework:spring-core CVE-2018-1271 Fix available EPSS 30.3% 5.9 MediumApril 6, 2018
• spring by pivotal framework, vmware spring framework, debian linux +26 more +28 more Spring Framework allows applications to expose STOMP over WebSocket endpoints CVE-2018-1270 Public exploitFix available EPSS 77.6% 9.8 CriticalApril 6, 2018
• jquery, oracle agile product lifecycle management for process, banking platform +44 more +46 more Cross-Site Scripting (XSS) in jquery CVE-2015-9251 Public exploitFix available EPSS 29.7% 6.1 MediumJanuary 18, 2018
• apache log4j, netapp oncommand api services, oncommand insight +76 more +78 more Deserialization of Untrusted Data in Log4j CVE-2017-5645 Public exploitFix available EPSS 89.4% 9.8 CriticalApril 17, 2017