Oracle Oracle Communications Policy Management

Name: Oracle Oracle Communications Policy Management
Brand: Oracle

productNL

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

5critical10high4medium0low

updated 2026-10-27

vulnerabilities (37)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-66516US	critical9.8	89.0% (100th)	Exploit	no fix	2025-12-04	≤ vers:unknown/*
CVE-2025-49844US	critical9.9	82.6% (100th)	Exploit	no fix	2025-10-03	≤ vers:unknown/*
CVE-2025-48976US	—	32.9% (98th)	Exploit	no fix	2025-06-16	≤ vers:unknown/*
CVE-2025-27533US	high7.5	8.96% (95th)	Exploit	no fix	2025-05-07	≤ vers:unknown/*
CVE-2025-31651US	critical9.8	4.19% (91st)	Exploit	no fix	2025-04-28	≤ vers:unknown/*
CVE-2026-4800US	critical9.8	2.76% (86th)	Exploit	no fix	2026-03-31	≤ vers:unknown/*
CVE-2025-48924US	—	2.63% (85th)	Exploit	no fix	2025-07-11	≤ vers:unknown/*
CVE-2025-58098US	—	1.42% (73rd)	Exploit	no fix	2025-12-05	≤ vers:unknown/*
CVE-2026-2332US	critical9.1	1.31% (70th)	Exploit	no fix	2026-04-14	≤ vers:unknown/*
CVE-2025-55163US	high7.5	1.10% (66th)	Exploit	no fix	2025-08-13	≤ vers:unknown/*
CVE-2025-48060US	high7.5	0.56% (46th)	Exploit	no fix	2025-05-21	≤ vers:unknown/*
CVE-2026-40976US	—OT elevated	0.49% (42nd)	Exploit	no fix	2026-04-28	≤ vers:unknown/*
CVE-2025-41249US	—OT elevated	0.48% (41st)	Exploit	no fix	2025-09-16	≤ vers:unknown/*
CVE-2025-65018US	—	0.28% (20th)	Exploit	no fix	2025-11-25	≤ vers:unknown/*
CVE-2025-5115US	high7.5	3.57% (89th)	—	no fix	2025-08-20	≤ vers:unknown/*
CVE-2024-46901US	medium4.3	1.93% (80th)	—	no fix	2024-12-09	≤ vers:unknown/*
CVE-2025-5318US	—	1.84% (79th)	—	no fix	2025-06-24	≤ vers:unknown/*
CVE-2025-5987US	—	1.73% (77th)	—	no fix	2025-07-07	≤ vers:unknown/*
CVE-2025-32988US	high8.2	1.47% (74th)	—	no fix	2025-07-10	≤ vers:unknown/*
CVE-2025-59375US	—	1.38% (72nd)	—	no fix	2025-09-15	≤ vers:unknown/*
CVE-2025-61795US	—	1.25% (69th)	—	no fix	2025-10-27	≤ vers:unknown/*
CVE-2025-46727US	high7.5	1.21% (68th)	—	no fix	2025-05-07	≤ vers:unknown/*
CVE-2024-12133US	—	1.11% (66th)	—	no fix	2025-02-10	≤ vers:unknown/*
CVE-2025-9900US	—	0.97% (62nd)	—	no fix	2025-09-23	≤ vers:unknown/*
CVE-2026-33557US	—	0.90% (59th)	—	no fix	2026-04-20	≤ vers:unknown/*
CVE-2025-32990US	high8.2	0.90% (59th)	—	no fix	2025-07-10	≤ vers:unknown/*
CVE-2025-68161US	medium4.8	0.77% (55th)	—	no fix	2025-12-18	≤ vers:unknown/*
CVE-2025-8194US	—	0.71% (53rd)	—	no fix	2025-07-28	≤ vers:unknown/*
CVE-2025-66418US	high7.5	0.68% (52nd)	—	no fix	2025-12-05	≤ vers:unknown/*
CVE-2025-58057US	high7.5	0.63% (50th)	—	no fix	2025-09-04	≤ vers:unknown/*
CVE-2026-34520US	—	0.46% (40th)	—	no fix	2026-04-01	≤ vers:unknown/*
CVE-2025-8916US	—	0.46% (40th)	—	no fix	2025-08-13	≤ vers:unknown/*
CVE-2025-64718US	—	0.42% (36th)	—	no fix	2025-11-13	≤ vers:unknown/*
CVE-2026-61223US	—	0.39% (33rd)	—	no fix	2026-07-21	≤ vers:unknown/*
CVE-2025-25193US	medium5.5	0.39% (33rd)	—	no fix	2025-02-10	≤ vers:unknown/*
CVE-2025-26333US	high7.5	0.33% (25th)	—	no fix	2025-09-25	≤ vers:unknown/*
CVE-2025-54571US	medium6.1	0.33% (25th)	—	no fix	2025-08-06	≤ vers:unknown/*

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-770Allocation of Resources Without Limits or Throttling7 CVEs
CWE-400Uncontrolled Resource Consumption4 CVEs
CWE-404Improper Resource Shutdown or Release3 CVEs
CWE-116Improper Encoding or Escaping of Output2 CVEs
CWE-122Heap-based Buffer Overflow2 CVEs
CWE-252Unchecked Return Value2 CVEs
CWE-787Out-of-bounds Write2 CVEs
CWE-113Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')1 CVEs

sources (1)

Which sources assert this record, and when.

NLNCSC-NL (CSAF)37 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan