Oracle Corp. Communications Application Session Controller

Name: Oracle Corp. Communications Application Session Controller
Brand: Oracle Corp.

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

6critical5high4medium1low

updated 2026-10-27

vulnerabilities (16)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2017-12617US	high8.1OT critical	100.0% (100th)	KEV	no fix	2017-10-04	2 versions
CVE-2015-4852US	critical9.8OT critical	95.0% (100th)	KEV	no fix	2015-11-18	≤ 3.7.1M0
CVE-2020-11022US	medium6.1	99.2% (100th)	Exploit	no fix	2020-04-29	≤ 3.8.0
CVE-2015-7501US	critical9.8OT critical	85.6% (100th)	Exploit	no fix	2017-11-09	≤ 3.7.1M0
CVE-2019-17638US	critical9.4	11.1% (96th)	Exploit	no fix	2020-07-09	≤ 3.9m0p1
CVE-2020-9488US	low3.7	8.22% (95th)	Exploit	no fix	2020-04-27	≤ 3.9m0p1
CVE-2018-0732US	high7.5	47.0% (99th)	—	no fix	2018-06-12	2 versions
CVE-2020-13954US	medium6.1	40.9% (99th)	—	no fix	2020-11-12	≤ 3.9m0p3
CVE-2018-8013US	critical9.8	18.9% (97th)	—	no fix	2018-05-24	2 versions
CVE-2017-3738US	medium5.9	13.4% (96th)	—	no fix	2017-12-07	2 versions
CVE-2018-1000120US	critical9.8	11.6% (96th)	—	no fix	2018-03-14	2 versions
CVE-2019-17566US	high7.5	10.9% (96th)	—	no fix	2020-11-12	≤ 3.9m0p2
CVE-2020-10683US	critical9.8	7.27% (94th)	—	no fix	2020-05-01	≤ 3.9m0p1
CVE-2020-27216US	high7.0	4.35% (91st)	—	no fix	2020-10-23	≤ 3.9m0p2
CVE-2018-1000180US	high7.5OT elevated	3.42% (89th)	—	no fix	2018-06-05	2 versions
CVE-2021-2351US	medium5.1OT elevated	2.43% (84th)	—	no fix	2021-07-21	≤ 3.9

The flaw types (CWEs) most of these CVEs share.

CWE-502Deserialization of Untrusted Data3 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-327Use of a Broken or Risky Cryptographic Algorithm2 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-1284Improper Validation of Specified Quantity in Input1 CVEs
CWE-190Integer Overflow or Wraparound1 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-287Improper Authentication1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.