Communications

productDE

cpe:/a:oracle:communications:24.2.4-25.2.000

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

13critical13high16medium4low

updated 2026-10-27

vulnerabilities (81)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-4800US	critical9.8	2.76% (86th)	Exploit	no fix	2026-03-31	—
CVE-2025-48924US	—	2.63% (85th)	Exploit	no fix	2025-07-11	—
CVE-2025-48734US	—	2.02% (81st)	Exploit	no fix	2025-05-28	—
CVE-2026-49844US	medium5.9	0.60% (48th)	Exploit	no fix	2026-07-10	—
CVE-2026-21441US	high7.5	2.92% (87th)	—	no fix	2026-01-07	—
CVE-2024-47072US	—	2.00% (81st)	—	no fix	2024-11-08	—
CVE-2021-42576US	critical9.8	1.56% (75th)	—	no fix	2021-10-18	—
CVE-2026-64193US	—	1.44% (73rd)	—	no fix	2026-07-20	—
CVE-2025-13151US	—	1.37% (72nd)	—	no fix	2026-01-07	—
CVE-2026-63639US	—	1.17% (67th)	—	no fix	2026-08-18	—
CVE-2026-45292US	—	1.10% (65th)	—	no fix	2026-05-28	—
CVE-2026-58389US	high7.5	1.03% (64th)	—	no fix	2026-07-27	—
CVE-2026-55971US	critical9.8	0.98% (62nd)	—	no fix	2026-07-27	—
CVE-2024-6763US	medium5.3	0.97% (62nd)	—	no fix	2024-10-14	—
CVE-2026-27601US	medium5.9	0.96% (61st)	—	no fix	2026-03-03	—
CVE-2026-56740US	—	0.88% (59th)	—	no fix	2026-07-17	—
CVE-2026-55858US	—	0.87% (59th)	—	no fix	2026-08-28	—
CVE-2026-84939US	—	0.85% (58th)	—	no fix	2026-09-10	—
CVE-2026-54399US	—	0.78% (56th)	—	no fix	2026-07-01	—
CVE-2026-61674US	—	0.72% (54th)	—	no fix	2026-09-21	—
CVE-2026-55956US	—	0.69% (53rd)	—	no fix	2026-06-29	—
CVE-2026-34481US	high7.5	0.69% (53rd)	—	no fix	2026-04-10	—
CVE-2026-28369US	critical9.1	0.69% (53rd)	—	no fix	2026-03-27	—
CVE-2026-29167US	—	0.69% (53rd)	—	no fix	2026-06-08	—
CVE-2026-55831US	—	0.66% (52nd)	—	no fix	2026-07-21	—
CVE-2026-39892US	critical9.8	0.65% (51st)	—	no fix	2026-04-08	—
CVE-2026-54874US	—	0.62% (50th)	—	no fix	2026-08-25	—
CVE-2026-58014US	high8.6	0.56% (46th)	—	no fix	2026-06-30	—
CVE-2026-58016US	critical9.1	0.55% (46th)	—	no fix	2026-06-30	—
CVE-2026-5795US	—	0.53% (45th)	—	no fix	2026-04-08	—
CVE-2024-38356US	—	0.53% (45th)	—	no fix	2024-06-19	—
CVE-2026-5450US	—	0.50% (43rd)	—	no fix	2026-04-20	—
CVE-2026-101763US	critical9.8OT elevated	0.50% (43rd)	—	no fix	2026-10-20	—
CVE-2026-68525US	—OT elevated	0.49% (42nd)	—	no fix	2026-08-25	—
CVE-2026-7168US	medium5.3OT elevated	0.47% (41st)	—	no fix	2026-05-13	—
CVE-2026-86219US	—OT elevated	0.47% (40th)	—	no fix	2026-09-06	—
CVE-2026-59949US	—	0.47% (40th)	—	no fix	2026-08-18	—
CVE-2026-68494US	—	0.46% (40th)	—	no fix	2026-08-04	—
CVE-2026-59901US	high7.5	0.46% (40th)	—	no fix	2026-07-29	—
CVE-2026-32327US	—	0.46% (40th)	—	no fix	2026-08-06	—
CVE-2026-34487US	—	0.45% (39th)	—	no fix	2026-04-09	—
CVE-2026-8763US	critical9.1	0.43% (37th)	—	no fix	2026-08-03	—
CVE-2026-5704US	medium5.5	0.43% (37th)	—	no fix	2026-04-06	—
CVE-2026-78030US	—	0.42% (36th)	—	no fix	2026-09-19	—
CVE-2026-101765US	critical9.1OT elevated	0.42% (36th)	—	no fix	2026-10-20	—
CVE-2026-101759US	high7.5	0.42% (36th)	—	no fix	2026-10-20	—
CVE-2026-101604US	high7.5	0.40% (34th)	—	no fix	2026-10-20	—
CVE-2026-75596US	high7.5	0.37% (31st)	—	no fix	2026-08-19	—
CVE-2026-60075US	—	0.37% (31st)	—	no fix	2026-07-30	—
CVE-2026-5928US	—	0.37% (31st)	—	no fix	2026-04-20	—

showing 50 of 81

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-284Improper Access Control11 CVEs
CWE-287Improper Authentication9 CVEs
CWE-266Incorrect Privilege Assignment7 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor6 CVEs
CWE-770Allocation of Resources Without Limits or Throttling6 CVEs
CWE-787Out-of-bounds Write4 CVEs
CWE-269Improper Privilege Management3 CVEs
CWE-294Authentication Bypass by Capture-replay3 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)81 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan