Vulnerability intelligence
VULONE Vulnerability Database
Stay ahead of what gets exploited. Every CVE from NVD, enriched every 30 minutes with EPSS, CISA KEV, ransomware linkage and automated analysis.
398,846CVE records
2,901Published, last 7 days
1,728In CISA KEV
1,432Critical, last 30 days
5,599Analysed
22:17 UTCLast NVD sync
Filters Show:
20 results. Oracle Communications Application Session Controller.
Page 1 of 1| ID | Severity | Score | Technology | Weakness | CISA KEV | Exploit | EPSS | Published |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-2351 | High | 8.3 |  Oracle Advanced Networking Option +39 | Broken cryptographic algorithm | — | 8 refs | 2.4% | Jul 21, 2021 |
| CVE-2021-29425 | Medium | 4.8 |  Apache Commons Io +39 | Improper input validation | — | 2 refs | 9.9% | Apr 13, 2021 |
| CVE-2020-11987 | High | 8.2 | Apache Batik +21 | Improper input validation | — | — | 13% | Feb 24, 2021 |
| CVE-2020-28052 | High | 8.1 |  Bouncycastle Bc Java +19 | — | — | 2 refs | 7.2% | Dec 18, 2020 |
| CVE-2019-17566 | High | 7.5 | Apache Batik +17 | Server-side request forgery (SSRF) | — | — | 11% | Nov 12, 2020 |
| CVE-2020-27216 | High | 7.0 |  Eclipse Jetty +17 | CWE-378 | — | 4 refs | 4.4% | Oct 23, 2020 |
| CVE-2020-10683 | Critical | 9.8 |  Dom4j Project Dom4j +37 | XML external entity (XXE) | — | — | 7.3% | May 1, 2020 |
| CVE-2020-11022 | Medium | 6.1 |  Jquery +39 | Cross-site scripting | — | 1 ref | 99% | Apr 29, 2020 |
| CVE-2020-9488 | Low | 3.7 | Apache Log4j +39 | Improper certificate validation | — | — | 8.1% | Apr 27, 2020 |
| CVE-2020-5258 | High | 7.7 |  Linuxfoundation Dojo +9 | Code injection | — | 2 refs | 4.0% | Mar 10, 2020 |
| CVE-2019-10219 | Medium | 6.1 |  Redhat Hibernate Validator +39 | Cross-site scripting | — | — | 2.2% | Nov 8, 2019 |
| CVE-2019-11358 | Medium | 6.1 | Jquery +39 | Prototype pollution | — | 2 refs | 87% | Apr 20, 2019 |
| CVE-2018-11784 | Medium | 4.3 | Apache Tomcat +14 | Open redirect | — | — | 98% | Oct 4, 2018 |
| CVE-2018-1000613 | Critical | 9.8 | Bouncycastle Bc Java +23 | CWE-470 | — | — | 4.8% | Jul 9, 2018 |
| CVE-2018-1000180 | High | 7.5 | Bouncycastle Bc Java +19 | Broken cryptographic algorithm | — | — | 3.6% | Jun 5, 2018 |
| CVE-2017-3730 | High | 7.5 | OOpenssl +6 | NULL pointer dereference | — | 2 refs | 55% | May 4, 2017 |
| CVE-2016-8735 | Critical | 9.8 | Apache Tomcat +18 | — | Listed | Confirmed | 90% | Apr 6, 2017 |
| CVE-2015-2808 | Low | 3.7 | Oracle Communications Application Session +39 | Broken cryptographic algorithm | — | — | 74% | Apr 1, 2015 |
| CVE-2015-0235 | High | 10.0 |  Gnu Glibc +17 | Out-of-bounds write | — | 24 refs | 95% | Jan 28, 2015 |
| CVE-2013-2566 | Medium | 5.9 | Oracle Communications Application Session +15 | Inadequate encryption strength | — | — | 84% | Mar 15, 2013 |
