Oracle Communications 11.0

productDE

cpe:/a:oracle:communications:11.0

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

15critical13high17medium4low

updated 2026-10-27

vulnerabilities (97)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-3288US	—	6.55% (94th)	Exploit	no fix	2026-03-09	—
CVE-2026-4800US	critical9.8	2.76% (86th)	Exploit	no fix	2026-03-31	—
CVE-2025-48924US	—	2.63% (85th)	Exploit	no fix	2025-07-11	—
CVE-2025-48734US	—	2.02% (81st)	Exploit	no fix	2025-05-28	—
CVE-2025-12543US	critical9.6	1.33% (71st)	Exploit	no fix	2026-01-07	—
CVE-2026-49844US	medium5.9	0.60% (48th)	Exploit	no fix	2026-07-10	—
CVE-2026-21441US	high7.5	2.92% (87th)	—	no fix	2026-01-07	—
CVE-2024-47072US	—	2.00% (81st)	—	no fix	2024-11-08	—
CVE-2021-42576US	critical9.8	1.56% (75th)	—	no fix	2021-10-18	—
CVE-2026-64193US	—	1.44% (73rd)	—	no fix	2026-07-20	—
CVE-2025-13151US	—	1.37% (72nd)	—	no fix	2026-01-07	—
CVE-2026-63639US	—	1.17% (67th)	—	no fix	2026-08-18	—
CVE-2026-45292US	—	1.10% (65th)	—	no fix	2026-05-28	—
CVE-2026-58389US	high7.5	1.03% (64th)	—	no fix	2026-07-27	—
CVE-2024-8184US	medium6.5	1.03% (64th)	—	no fix	2024-10-14	—
CVE-2026-55971US	critical9.8	0.98% (62nd)	—	no fix	2026-07-27	—
CVE-2024-6763US	medium5.3	0.97% (62nd)	—	no fix	2024-10-14	—
CVE-2026-27601US	medium5.9	0.96% (61st)	—	no fix	2026-03-03	—
CVE-2025-27821US	—	0.91% (60th)	—	no fix	2026-01-26	—
CVE-2026-56740US	—	0.88% (59th)	—	no fix	2026-07-17	—
CVE-2026-55858US	—	0.87% (59th)	—	no fix	2026-08-28	—
CVE-2026-84939US	—	0.85% (58th)	—	no fix	2026-09-10	—
CVE-2025-58050US	critical9.1	0.83% (57th)	—	no fix	2025-08-27	—
CVE-2026-54399US	—	0.78% (56th)	—	no fix	2026-07-01	—
CVE-2025-48795US	—	0.73% (54th)	—	no fix	2025-07-15	—
CVE-2026-61674US	—	0.72% (54th)	—	no fix	2026-09-21	—
CVE-2026-55956US	—	0.69% (53rd)	—	no fix	2026-06-29	—
CVE-2026-34481US	high7.5	0.69% (53rd)	—	no fix	2026-04-10	—
CVE-2026-28369US	critical9.1	0.69% (53rd)	—	no fix	2026-03-27	—
CVE-2026-29167US	—	0.69% (53rd)	—	no fix	2026-06-08	—
CVE-2025-33042US	—	0.67% (52nd)	—	no fix	2026-02-13	—
CVE-2026-55831US	—	0.66% (52nd)	—	no fix	2026-07-21	—
CVE-2026-39892US	critical9.8	0.65% (51st)	—	no fix	2026-04-08	—
CVE-2026-54874US	—	0.62% (50th)	—	no fix	2026-08-25	—
CVE-2025-66566US	—	0.60% (49th)	—	no fix	2025-12-05	—
CVE-2026-21452US	—	0.60% (49th)	—	no fix	2026-01-02	—
CVE-2026-22022US	—	0.58% (47th)	—	no fix	2026-01-21	—
CVE-2025-67635US	—	0.56% (47th)	—	no fix	2025-12-10	—
CVE-2026-58014US	high8.6	0.56% (46th)	—	no fix	2026-06-30	—
CVE-2026-58016US	critical9.1	0.55% (46th)	—	no fix	2026-06-30	—
CVE-2026-5795US	—	0.53% (45th)	—	no fix	2026-04-08	—
CVE-2024-38356US	—	0.53% (45th)	—	no fix	2024-06-19	—
CVE-2026-5450US	—	0.50% (43rd)	—	no fix	2026-04-20	—
CVE-2026-101763US	critical9.8OT elevated	0.50% (43rd)	—	no fix	2026-10-20	—
CVE-2026-68525US	—OT elevated	0.49% (42nd)	—	no fix	2026-08-25	—
CVE-2026-27099US	—	0.48% (41st)	—	no fix	2026-02-18	—
CVE-2025-41253US	—	0.48% (41st)	—	no fix	2025-10-16	—
CVE-2026-7168US	medium5.3OT elevated	0.47% (41st)	—	no fix	2026-05-13	—
CVE-2026-86219US	—OT elevated	0.47% (40th)	—	no fix	2026-09-06	—
CVE-2026-59949US	—	0.47% (40th)	—	no fix	2026-08-18	—

showing 50 of 97

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-284Improper Access Control11 CVEs
CWE-287Improper Authentication9 CVEs
CWE-266Incorrect Privilege Assignment7 CVEs
CWE-770Allocation of Resources Without Limits or Throttling7 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor6 CVEs
CWE-400Uncontrolled Resource Consumption6 CVEs
CWE-787Out-of-bounds Write6 CVEs
CWE-122Heap-based Buffer Overflow3 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)97 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan