oracle communications messaging server
productUScpe:2.3:a:oracle:communications_messaging_server:*:*:*:*:*:*:*:*
A product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
by severity
3critical9high8medium0low
updated 2026-10-28
01
vulnerabilities (20)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2021-45105US | medium5.9 | Exploit |
| CVE-2017-5645US | critical9.8 | Exploit |
| CVE-2021-4104US | high7.5 | Exploit |
| CVE-2022-23305US | critical9.8 | Exploit |
| CVE-2020-24616US | high8.1 | Exploit |
| CVE-2020-24750US | high8.1 | Exploit |
| CVE-2019-10219US | medium6.1 | Exploit |
| CVE-2022-23302US | high8.8 | — |
| CVE-2022-23307US | high8.8 | — |
| CVE-2019-0228US | critical9.8 | — |
| CVE-2021-40690US | high7.5 | — |
| CVE-2021-21409US | medium5.9 | — |
| CVE-2020-13871US | high7.5 | — |
| CVE-2020-36189US | high8.1 | — |
| CVE-2020-1950US | medium5.5 | — |
| CVE-2020-1951US | medium5.5 | — |
| CVE-2016-5455US | medium5.3 | — |
| CVE-2014-7923US | high7.5 | — |
| CVE-2021-21290US | medium5.5 | — |
| CVE-2020-15358US | medium5.5 | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-502Deserialization of Untrusted Data7 CVEs
- CWE-20Improper Input Validation3 CVEs
- CWE-17CWE-171 CVEs
- CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
- CWE-378Creation of Temporary File With Insecure Permissions1 CVEs
- CWE-379Creation of Temporary File in Directory with Insecure Permissions1 CVEs
- CWE-400Uncontrolled Resource Consumption1 CVEs
- CWE-416Use After Free1 CVEs
03
sources (1)
Which sources assert this record, and when.
- USNVD / CVE20 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan