Oracle Communications 25.2.100

productDE

cpe:/a:oracle:communications:25.2.100

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

15critical15high19medium4low

updated 2026-10-27

vulnerabilities (104)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-3288US	—	6.55% (94th)	Exploit	no fix	2026-03-09	—
CVE-2026-4800US	critical9.8	2.76% (86th)	Exploit	no fix	2026-03-31	—
CVE-2025-48924US	—	2.63% (85th)	Exploit	no fix	2025-07-11	—
CVE-2025-48734US	—	2.02% (81st)	Exploit	no fix	2025-05-28	—
CVE-2025-12543US	critical9.6	1.33% (71st)	Exploit	no fix	2026-01-07	—
CVE-2026-49844US	medium5.9	0.60% (48th)	Exploit	no fix	2026-07-10	—
CVE-2025-53547US	high8.6	0.46% (40th)	Exploit	no fix	2025-07-08	—
CVE-2026-21441US	high7.5	2.92% (87th)	—	no fix	2026-01-07	—
CVE-2024-47072US	—	2.00% (81st)	—	no fix	2024-11-08	—
CVE-2024-46901US	medium4.3	1.93% (80th)	—	no fix	2024-12-09	—
CVE-2021-42576US	critical9.8	1.56% (75th)	—	no fix	2021-10-18	—
CVE-2026-64193US	—	1.44% (73rd)	—	no fix	2026-07-20	—
CVE-2025-13151US	—	1.37% (72nd)	—	no fix	2026-01-07	—
CVE-2025-46727US	high7.5	1.21% (68th)	—	no fix	2025-05-07	—
CVE-2026-63639US	—	1.17% (67th)	—	no fix	2026-08-18	—
CVE-2026-45292US	—	1.10% (65th)	—	no fix	2026-05-28	—
CVE-2026-58389US	high7.5	1.03% (64th)	—	no fix	2026-07-27	—
CVE-2024-8184US	medium6.5	1.03% (64th)	—	no fix	2024-10-14	—
CVE-2026-55971US	critical9.8	0.98% (62nd)	—	no fix	2026-07-27	—
CVE-2024-6763US	medium5.3	0.97% (62nd)	—	no fix	2024-10-14	—
CVE-2026-27601US	medium5.9	0.96% (61st)	—	no fix	2026-03-03	—
CVE-2025-27821US	—	0.91% (60th)	—	no fix	2026-01-26	—
CVE-2026-56740US	—	0.88% (59th)	—	no fix	2026-07-17	—
CVE-2025-54090US	—	0.88% (59th)	—	no fix	2025-07-23	—
CVE-2026-55858US	—	0.87% (59th)	—	no fix	2026-08-28	—
CVE-2026-84939US	—	0.85% (58th)	—	no fix	2026-09-10	—
CVE-2025-58050US	critical9.1	0.83% (57th)	—	no fix	2025-08-27	—
CVE-2026-54399US	—	0.78% (56th)	—	no fix	2026-07-01	—
CVE-2025-48795US	—	0.73% (54th)	—	no fix	2025-07-15	—
CVE-2026-61674US	—	0.72% (54th)	—	no fix	2026-09-21	—
CVE-2026-55956US	—	0.69% (53rd)	—	no fix	2026-06-29	—
CVE-2026-34481US	high7.5	0.69% (53rd)	—	no fix	2026-04-10	—
CVE-2026-28369US	critical9.1	0.69% (53rd)	—	no fix	2026-03-27	—
CVE-2026-29167US	—	0.69% (53rd)	—	no fix	2026-06-08	—
CVE-2025-33042US	—	0.67% (52nd)	—	no fix	2026-02-13	—
CVE-2026-55831US	—	0.66% (52nd)	—	no fix	2026-07-21	—
CVE-2026-39892US	critical9.8	0.65% (51st)	—	no fix	2026-04-08	—
CVE-2026-54874US	—	0.62% (50th)	—	no fix	2026-08-25	—
CVE-2025-66566US	—	0.60% (49th)	—	no fix	2025-12-05	—
CVE-2026-21452US	—	0.60% (49th)	—	no fix	2026-01-02	—
CVE-2025-5889US	—	0.59% (48th)	—	no fix	2025-06-09	—
CVE-2026-22022US	—	0.58% (47th)	—	no fix	2026-01-21	—
CVE-2025-67635US	—	0.56% (47th)	—	no fix	2025-12-10	—
CVE-2026-58014US	high8.6	0.56% (46th)	—	no fix	2026-06-30	—
CVE-2026-58016US	critical9.1	0.55% (46th)	—	no fix	2026-06-30	—
CVE-2026-5795US	—	0.53% (45th)	—	no fix	2026-04-08	—
CVE-2024-38356US	—	0.53% (45th)	—	no fix	2024-06-19	—
CVE-2023-26555US	medium6.4	0.52% (44th)	—	no fix	2023-04-11	—
CVE-2026-5450US	—	0.50% (43rd)	—	no fix	2026-04-20	—
CVE-2026-101763US	critical9.8OT elevated	0.50% (43rd)	—	no fix	2026-10-20	—

showing 50 of 104

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-284Improper Access Control11 CVEs
CWE-287Improper Authentication9 CVEs
CWE-400Uncontrolled Resource Consumption8 CVEs
CWE-770Allocation of Resources Without Limits or Throttling8 CVEs
CWE-266Incorrect Privilege Assignment7 CVEs
CWE-787Out-of-bounds Write7 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor6 CVEs
CWE-20Improper Input Validation4 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)104 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan