CC
Product
Communications Converged Application Server
On CISA KEVExploited in the wildRansomware-linked
16
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 7Medium 3Low 0
Watch
Add Communications Converged Application Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-2725 RansomwareIn wildKEV | 9.8 | Apr 26 | Oracle WebLogic Server, Injection Affected: 5.1; 7.0; 7.1 |
| CVE-2023-21890 | 9.8 | Jan 18 | Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: Core) Affected: 7.1.0; 8.0.0 |
| CVE-2018-1000613 | 9.8 | Jul 9 | Legion of the Bouncy Castle Legion of the Bouncy Castle Java Cryptography APIs 1.58 up to but not including 1.60 contains a CWE-470: Use of Externally-Controlled Input to Select… Affected: before 7.0.0.1; 7.0.0.1 |
| CVE-2018-1275 | 9.8 | Apr 11 | Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.16 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a… Affected: before 7.0.0.1 |
| CVE-2018-1270 | 9.8 | Apr 6 | Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a… Affected: before 7.0.0.1 |
| CVE-2026-61223 | 9.0 | Jul 21 | Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: Security) Affected: 8.2.0; 8.3.0 |
Showing 6