oracle communications webrtc session controller

Name: oracle communications webrtc session controller
Brand: oracle

productUS

cpe:2.3:a:oracle:communications_webrtc_session_controller:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

8critical10high17medium0low

updated 2026-10-28

vulnerabilities (39)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-44487US	high7.5OT critical	100.0% (100th)	KEV	no fix	2023-10-10	—
CVE-2023-46604US	critical9.8OT critical	99.9% (100th)	KEV	no fix	2023-10-27	—
CVE-2021-45105US	medium5.9	100.0% (100th)	Exploit	no fix	2021-12-18	2 versions
CVE-2020-11022US	medium6.1	99.2% (100th)	Exploit	no fix	2020-04-29	= 7.2
CVE-2015-0235US	high10.0	94.6% (100th)	Exploit	no fix	2015-01-28	3 versions
CVE-2023-48795US	medium5.9OT high	93.5% (100th)	Exploit	no fix	2023-12-18	—
CVE-2017-5645US	critical9.8	89.4% (100th)	Exploit	7.2	2017-04-17	< 7.2
CVE-2019-11358US	medium6.1	86.8% (100th)	Exploit	no fix	2019-04-20	= 7.2
CVE-2015-3195US	medium5.3	38.7% (99th)	Exploit	no fix	2015-12-06	3 versions
CVE-2015-9251US	medium6.1	29.7% (98th)	Exploit	7.2	2018-01-18	< 7.2
CVE-2024-24549US	—	23.1% (98th)	Exploit	no fix	2024-03-13	—
CVE-2019-10219US	medium6.1	2.16% (82nd)	Exploit	no fix	2019-11-08	2 versions
CVE-2023-3635US	high7.5	1.25% (69th)	Exploit	no fix	2023-07-12	—
CVE-2024-26308US	medium5.5	0.90% (59th)	Exploit	no fix	2024-02-19	—
CVE-2018-8013US	critical9.8	18.9% (97th)	—	7.2	2018-05-24	< 7.2
CVE-2018-1000120US	critical9.8	11.6% (96th)	—	7.2	2018-03-14	< 7.2
CVE-2018-1000121US	high7.5	9.21% (95th)	—	7.2	2018-03-14	< 7.2
CVE-2018-1000122US	critical9.1	9.04% (95th)	—	7.2	2018-03-14	< 7.2
CVE-2018-1000301US	critical9.1	5.92% (93rd)	—	7.2	2018-05-24	< 7.2
CVE-2018-1000613US	critical9.8	4.77% (92nd)	—	7.2	2018-07-09	2 versions
CVE-2023-5678US	medium5.3	4.46% (91st)	—	no fix	2023-11-06	—
CVE-2018-1000180US	high7.5OT elevated	3.42% (89th)	—	7.2	2018-06-05	< 7.2
CVE-2018-3246US	high7.5	2.95% (87th)	—	7.2	2018-10-17	< 7.2
CVE-2024-23672US	—	2.31% (83rd)	—	no fix	2024-03-13	—
CVE-2021-37533US	medium6.5	2.13% (82nd)	—	no fix	2022-12-03	—
CVE-2023-46218US	medium6.5	1.69% (77th)	—	no fix	2023-12-07	—
CVE-2017-10153US	medium6.3	1.61% (76th)	—	no fix	2017-10-19	3 versions
CVE-2024-22201US	high7.5	1.43% (73rd)	—	no fix	2024-02-26	—
CVE-2024-25062US	high7.5	1.31% (71st)	—	no fix	2024-02-04	—
CVE-2023-46219US	medium5.3OT elevated	1.13% (66th)	—	no fix	2023-12-12	—
CVE-2022-34381US	critical9.8	0.98% (62nd)	—	no fix	2024-02-02	—
CVE-2024-22257US	—OT elevated	0.96% (61st)	—	no fix	2024-03-18	—
CVE-2024-22195US	medium6.1	0.89% (59th)	—	no fix	2024-01-11	—
CVE-2023-51775US	—OT elevated	0.87% (59th)	—	no fix	2024-02-29	—
CVE-2023-52428US	high7.5	0.81% (57th)	—	no fix	2024-02-11	—
CVE-2023-4043US	high7.5	0.76% (55th)	—	no fix	2023-11-03	—
CVE-2024-25710US	medium5.5	0.44% (38th)	—	no fix	2024-02-19	—
CVE-2023-35116US	medium4.7	0.35% (29th)	—	no fix	2023-06-14	—
CVE-2023-29081US	medium5.5OT elevated	0.14% (4th)	—	no fix	2024-01-26	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation6 CVEs
CWE-400Uncontrolled Resource Consumption6 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5 CVEs
CWE-502Deserialization of Untrusted Data4 CVEs
CWE-770Allocation of Resources Without Limits or Throttling4 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer3 CVEs
CWE-125Out-of-bounds Read2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs

sources (2)

Which sources assert this record, and when.

NLNCSC-NL (CSAF)22 CVEs
USNVD / CVE17 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan