Oracle Corporation Oracle Communications Converged Application Server vulnerabilities

16 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Exploited Oracle Corporation Oracle Communications Converged Application Server vulnerabilities

CVE-2026-61226 — (CVSS 7.5)
CVE-2026-61225 — (CVSS 8.1)
CVE-2026-61224 — (CVSS 8.0)
CVE-2026-61223 — (CVSS 9.0)
CVE-2023-21890 — (CVSS 9.8)
CVE-2019-2725 — Oracle WebLogic Server, Injection (CVSS 9.8) — exploited
CVE-2018-3246 — (CVSS 7.5)
CVE-2018-1000613 — (CVSS 9.8)
CVE-2018-1000180 — (CVSS 7.5)
CVE-2018-1258 — (CVSS 8.8)
CVE-2018-1257 — (CVSS 6.5)
CVE-2018-1275 — (CVSS 9.8)
CVE-2018-1272 — (CVSS 7.5)
CVE-2018-1271 — (CVSS 5.9)
CVE-2018-1270 — (CVSS 9.8)
CVE-2015-9251 — (CVSS 6.1)