Design/Logic Flaw

Vulnerability in the Oracle Enterprise Communications Broker product of Oracle Communications Applications component: WebGUI. Supported versions that are affected are 3.0.0-3.2.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

Design/Logic Flaw

Vulnerability in the Oracle SD-WAN Aware product of Oracle Communications Applications component: User Interface. The supported version that is affected is 8.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle SD-WAN Aware. While t...

CVE-2020-14722

CVE-2020-14722 affects Oracle Enterprise Communications Broker (Oracle Communications Applications), WebGUI component, for versions 3.0.0–3.2.0. The vulnerability can be triggered by an unauthenticated attacker with network access via HTTP and requires user interaction from a non-attacker; succes...

CVE-2020-14701

Vulnerability in the Oracle SD-WAN Aware product of Oracle Communications Applications component: User Interface. The supported version that is affected is 8.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle SD-WAN Aware. While t...

CVE-2020-14606

Vulnerability in the Oracle SD-WAN Edge product of Oracle Communications Applications component: User Interface. Supported versions that are affected are 8.2 and 9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle SD-WAN Edge...

CVE-2020-14606

Vulnerability in the Oracle SD-WAN Edge product of Oracle Communications Applications component: User Interface. Supported versions that are affected are 8.2 and 9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle SD-WAN Edge...

CVE-2020-14606

CVE-2020-14606 affects Oracle SD-WAN Edge (Oracle Communications Applications) — component: User Interface. Affected versions are 8.2 and 9.0. The issue is exploitable by an unauthenticated attacker with network access over HTTP to compromise the appliance, potentially leading to takeover of Orac...

CVE-2020-14580

CVE-2020-14580 affects Oracle Communications Session Border Controller (Oracle Communications Applications, component: System Admin) in versions 8.1.0, 8.2.0 and 8.3.0. The description indicates an easily exploitable vulnerability that allows a low-privilege attacker with network access via SSH t...

Unspecified Vulnerability in Oracle Communications Applications Enterprise Communications

Oracle Enterprise Communications Broker is a core session manager designed to simplify complex multi-vendor VoIP and unified communications UC networks. A security vulnerability exists in Oracle Communications Applications Enterprise Communications. An attacker could exploit the vulnerability to...

Oracle Ties Previous All-Time Patch High with January Updates

Oracle has patched 334 vulnerabilities across all of its product families in its January 2020 quarterly Critical Patch Update CPU. Out of these, 43 are critical/severe flaws carrying CVSS scores of 9.1 and above. The CPU ties for Oracle’s previous all-time high for number of patches issued, in Ju...

Oracle Communications Applications Communications Diameter Signaling Router Access Control Error Vulnerability

Oracle Communications Applications is a suite of applications for rapidly delivering and monetizing digital life communications from Oracle Corporation.Communications Diameter Signaling Router DSR is one of the Oracle Communications Diameter Signaling Router component. An access control error...

CVE-2019-2399

Vulnerability in the Oracle Communications Diameter Signaling Router DSR component of Oracle Communications Applications subcomponent: Security. The supported version that is affected is prior to 8.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2018-2936

Vulnerability in the Oracle Communications Messaging Server component of Oracle Communications Applications subcomponent: Web Client. The supported version that is affected is 3.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-2904

CVE-2018-2904 affects Oracle Communications EAGLE LNP Application Processor GUI in Oracle Communications Applications (10.x). The vulnerability allows an unauthenticated attacker with network access over HTTP to read and modify data, with a CVSS v3.0 base score of 6.5 (Impact: Confidentiality and...

CVE-2018-2571

CVE-2018-2571 affects Oracle Communications Unified Inventory Management (Portal subcomponent) within Oracle Communications Applications. The vulnerability exists in versions 7.2.4.2.x and 7.3 and permits a low-privileged attacker with network access over HTTP to perform unauthorized read, and to...

CVE-2017-10159

Vulnerability in the Oracle Communications Policy Management component of Oracle Communications Applications subcomponent: Portal, CMP. Supported versions that are affected are 11.5 and 12.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

CVE-2017-10031

Vulnerability in the Oracle Communications Convergence component of Oracle Communications Applications subcomponent: Mail Proxy dojo. Supported versions that are affected are 3.0 and 3.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2017-3470

Vulnerability in the Oracle Communications Security Gateway component of Oracle Communications Applications subcomponent: Network. The supported version that is affected is 3.0.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via ICMP Ping to compromise...

CVE-2016-3515

Unspecified vulnerability in the Oracle Enterprise Communications Broker component in Oracle Communications Applications before PCz 2.0.0m4p1 allows remote attackers to affect confidentiality via unknown vectors...

CVE-2016-3514

Unspecified vulnerability in the Oracle Enterprise Communications Broker component in Oracle Communications Applications before PCz 2.0.0m4p1 allows remote authenticated users to affect confidentiality via vectors related to GUI, a different vulnerability than CVE-2016-3516...