Oracle Communications Applications vulnerabilities

5 CVEs affecting Oracle Communications Applications, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-14580, published 2020-07-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-6598, published 2015-01-21. High severity, CVSS 7.6. EPSS: 4.5% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Communications Diameter Signaling Router component in Oracle Communications Applications 3.x, 4.x, and 5.0 allows remote attackers to affect confidentiality,…
CVE-2015-2608, published 2015-10-21. High severity, CVSS 10.0. EPSS: 3.1% chance of exploitation in the next 30 days. Unspecified vulnerability in (1) the Oracle Communications Diameter Signaling Router (DSR) component in Oracle Communications Applications 4.1.6 and earlier, 5.1.0 and earlier, 6.0.2 and earlier, and…
CVE-2015-4793, published 2015-10-21. Medium severity, CVSS 4.3. EPSS: 1.7% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Communications Convergence component in Oracle Communications Applications 2.0 and 3.0.1 allows remote attackers to affect confidentiality via unknown vectors…
CVE-2014-6465, published 2014-10-15. Medium severity, CVSS 6.3. EPSS: 1% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Communications Session Border Controller component in Oracle Communications Applications SCX640m5 allows remote authenticated users to affect availability via…
CVE-2020-14580, published 2020-07-15. High severity, CVSS 8.2. EPSS: 1% chance of exploitation in the next 30 days. Vulnerability in the Oracle Communications Session Border Controller product of Oracle Communications Applications (component: System Admin). Supported versions that are affected are 8.1.0, 8.2.0 and…