oracle communications converged application server

Name: oracle communications converged application server
Brand: oracle

productUS

cpe:2.3:a:oracle:communications_converged_application_server:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

4critical4high3medium0low

updated 2026-10-27

vulnerabilities (16)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-2725US	critical9.8OT critical	100.0% (100th)	KEV	no fix	2019-04-26	3 versions
CVE-2018-1270US	critical9.8	77.5% (100th)	Exploit	7.0.0.1	2018-04-06	< 7.0.0.1
CVE-2015-9251US	medium6.1	29.7% (98th)	Exploit	7.0.0.1	2018-01-18	< 7.0.0.1
CVE-2018-1275US	critical9.8	57.4% (99th)	—	7.0.0.1	2018-04-11	< 7.0.0.1
CVE-2018-1271US	medium5.9	34.4% (98th)	—	7.0.0.1	2018-04-06	< 7.0.0.1
CVE-2018-1000613US	critical9.8	4.77% (92nd)	—	7.0.0.1	2018-07-09	2 versions
CVE-2018-1000180US	high7.5OT elevated	3.42% (89th)	—	7.0.0.1	2018-06-05	< 7.0.0.1
CVE-2018-1272US	high7.5	3.06% (88th)	—	7.0.0.1	2018-04-06	< 7.0.0.1
CVE-2018-1257US	medium6.5	3.02% (87th)	—	7.0.0.1	2018-05-11	< 7.0.0.1
CVE-2018-3246US	high7.5	2.95% (87th)	—	7.0.0.1	2018-10-17	< 7.0.0.1
CVE-2018-1258US	high8.8OT elevated	2.46% (84th)	—	7.0.0.1	2018-05-11	< 7.0.0.1
CVE-2023-21890US	—	0.84% (58th)	—	no fix	2023-01-18	2 versions
CVE-2026-61225US	—OT elevated	0.39% (33rd)	—	no fix	2026-07-21	2 versions
CVE-2026-61223US	—	0.39% (33rd)	—	no fix	2026-07-21	2 versions
CVE-2026-61224US	—	0.38% (31st)	—	no fix	2026-07-21	= 8.3.0
CVE-2026-61226US	—	0.15% (4th)	—	no fix	2026-07-21	= 8.3.0

The flaw types (CWEs) most of these CVEs share.

CWE-284Improper Access Control4 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')3 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-358Improperly Implemented Security Check for Standard2 CVEs
CWE-502Deserialization of Untrusted Data2 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-269Improper Privilege Management1 CVEs
CWE-285Improper Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.