Product by Oracle

    Oracle Communications Converged Application Server

    16 known vulnerabilities in Oracle Communications Converged Application Server (Oracle), 1 of them actively exploited (CISA KEV).

    Key figures

    16

    Vulnerabilities

    1

    Actively exploited (KEV)

    1

    Used by ransomware

    6

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Oracle Communications Converged Application Server (Oracle)
    CriticalCVE-2019-2725

    Oracle WebLogic Server, Injection

    In CISA KEVRansomwarealso in 7 other products

    		7.5
    CriticalCVE-2018-1270

    Spring Framework: Code Injection

    also in 28 other products

    		9.8
    CriticalCVE-2018-1275

    Spring Framework: Code Injection

    also in 19 other products

    		9.8
    CriticalCVE-2018-1000613

    Oracle Communications Diameter Signaling Router (DSR): Deserialization of Untrusted Data

    also in 22 other products

    		9.8
    MediumCVE-2015-9251

    jQuery: Cross-Site Scripting (XSS)

    also in 45 other products

    		6.1
    MediumCVE-2018-1271

    Spring Framework: Path Traversal

    also in 28 other products

    		5.9
    HighCVE-2018-1258

    Pivotal Spring Framework: security vulnerability

    also in 41 other products

    		8.8
    HighCVE-2018-1000180

    Oracle Business Process Management Suite: security vulnerability

    also in 18 other products

    		7.5
    HighCVE-2018-1272

    Spring Framework: Privilege Escalation

    also in 25 other products

    		7.5
    HighCVE-2018-3246

    Oracle WebLogic Server: security vulnerability

    also in 9 other products

    		7.5
    MediumCVE-2018-1257

    Pivotal Spring Framework: Denial of Service

    also in 30 other products

    		6.5
    CriticalCVE-2023-21890

    Oracle Communications Converged Application Server: security vulnerability

    also in 1 other product

    		9.8
    CriticalCVE-2026-61223

    Oracle Communications Converged Application Server: Improper Access Control

    also in 1 other product

    		9.0
    HighCVE-2026-61225

    Oracle Communications Converged Application Server: Missing Authentication for Critical Function

    also in 1 other product

    		8.1
    HighCVE-2026-61224

    Oracle Communications Converged Application Server: Improper Access Control

    also in 1 other product

    		8.0
    HighCVE-2026-61226

    Oracle Communications Converged Application Server: Improper Access Control

    also in 1 other product

    		7.5

    All products by Oracle