Oracle Corp. Communications Instant Messaging Server

Name: Oracle Corp. Communications Instant Messaging Server
Brand: Oracle Corp.

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

8critical17high5medium1low

updated 2026-10-27

vulnerabilities (31)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-1938US	critical9.8OT critical	99.3% (100th)	KEV	no fix	2020-02-24	≤ 10.0.1.4.0
CVE-2018-11784US	medium4.3	97.7% (100th)	Exploit	no fix	2018-10-04	2 versions
CVE-2017-5645US	critical9.8	89.4% (100th)	Exploit	no fix	2017-04-17	≤ 10.0.1.3.0
CVE-2022-23305US	critical9.8	66.5% (99th)	Exploit	no fix	2022-01-18	≤ 10.0.1.5.0
CVE-2019-12086US	high7.5	21.9% (98th)	Exploit	no fix	2019-05-17	≤ 10.0.1.3.0
CVE-2018-7489US	critical9.8	19.8% (97th)	Exploit	no fix	2018-02-26	≤ 10.0.1
CVE-2020-9548US	critical9.8	18.9% (97th)	Exploit	no fix	2020-03-02	≤ 10.0.1.4.0
CVE-2020-9547US	critical9.8	18.4% (97th)	Exploit	no fix	2020-03-02	≤ 10.0.1.4.0
CVE-2019-14439US	high7.5	10.8% (96th)	Exploit	no fix	2019-07-30	≤ 10.0.1.3.0
CVE-2020-9488US	low3.7	8.22% (95th)	Exploit	no fix	2020-04-27	≤ 10.0.1.4.0
CVE-2020-10673US	high8.8	8.03% (95th)	Exploit	no fix	2020-03-18	≤ 10.0.1.4.0
CVE-2020-11113US	high8.8	6.28% (94th)	Exploit	no fix	2020-03-31	≤ 10.0.1.4.0
CVE-2019-10072US	high7.5	73.0% (99th)	—	no fix	2019-06-21	≤ 10.0.1.3.0
CVE-2020-1927US	medium6.1	56.7% (99th)	—	no fix	2020-04-02	≤ 10.0.1.4.0
CVE-2020-1934US	medium5.3	52.0% (99th)	—	no fix	2020-04-01	≤ 10.0.1.4.0
CVE-2020-25649US	high7.5	17.7% (97th)	—	no fix	2020-12-03	≤ 10.0.1.5.0
CVE-2021-42340US	high7.5	11.8% (96th)	—	no fix	2021-10-14	≤ 10.0.1.5.0
CVE-2020-1935US	medium4.8	9.39% (95th)	—	no fix	2020-02-24	≤ 10.0.1.4.0
CVE-2019-17569US	medium4.8	8.87% (95th)	—	no fix	2020-02-24	≤ 10.0.1.4.0
CVE-2019-14379US	critical9.8	8.11% (95th)	—	no fix	2019-07-29	≤ 10.0.1.3.0
CVE-2020-35491US	high8.1	7.75% (95th)	—	no fix	2020-12-17	≤ 10.0.1.5.0
CVE-2020-35490US	high8.1	6.29% (94th)	—	no fix	2020-12-17	≤ 10.0.1.5.0
CVE-2020-11620US	high8.1	5.73% (93rd)	—	no fix	2020-04-07	≤ 10.0.1.4.0
CVE-2020-9546US	critical9.8	4.58% (92nd)	—	no fix	2020-03-02	≤ 10.0.1.4.0
CVE-2020-11619US	high8.1	3.68% (90th)	—	no fix	2020-04-07	≤ 10.0.1.4.0
CVE-2020-10968US	high8.8	3.66% (90th)	—	no fix	2020-03-26	≤ 10.0.1.4.0
CVE-2020-11112US	high8.8	3.64% (90th)	—	no fix	2020-03-31	≤ 10.0.1.4.0
CVE-2020-11111US	high8.8	3.61% (89th)	—	no fix	2020-03-31	≤ 10.0.1.4.0
CVE-2020-10650US	high8.1	3.60% (89th)	—	no fix	2022-12-26	≤ 10.0.1.4.0
CVE-2020-10969US	high8.8	3.56% (89th)	—	no fix	2020-03-26	≤ 10.0.1.4.0
CVE-2020-10672US	high8.8	3.06% (88th)	—	no fix	2020-03-18	≤ 10.0.1.4.0

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-502Deserialization of Untrusted Data20 CVEs
CWE-96Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')5 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')2 CVEs
CWE-601URL Redirection to Untrusted Site ('Open Redirect')2 CVEs
CWE-1321Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')1 CVEs
CWE-184Incomplete List of Disallowed Inputs1 CVEs

sources (1)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)31 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan