CC
Product
Communications Converged Application Server
On CISA KEVExploited in the wildRansomware-linked
16
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 7Medium 3Low 0
Watch
Add Communications Converged Application Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-1258 | 8.8 | May 11 | Spring Framework version 5.0.5 when used in combination with any versions of Spring Security contains an authorization bypass when using method security Affected: before 7.0.0.1 |
| CVE-2026-61225 | 8.1 | Jul 21 | Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: Core) Affected: 8.2.0; 8.3.0 |
| CVE-2026-61224 | 8.0 | Jul 21 | Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: Security) Affected: 8.3.0 |
| CVE-2026-61226 | 7.5 | Jul 21 | Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: RTP Proxy) Affected: 8.3.0 |
| CVE-2018-3246 | 7.5 | Oct 17 | Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services) Affected: before 7.0.0.1 |
| CVE-2018-1000180 | 7.5 | Jun 5 | Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier have a flaw in the Low-level interface to RSA key pair generator, specifically RSA Key Pairs generated in… Affected: before 7.0.0.1 |
| CVE-2018-1272 | 7.5 | Apr 6 | Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, provide client-side support for multipart requests Affected: before 7.0.0.1 |
Showing 7