Oracle Utilities Network Management System vulnerabilities

8 CVEs affecting Oracle Utilities Network Management System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-46981, published 2026-07-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-1000613, published 2018-07-09. Critical severity, CVSS 9.8. EPSS: 4.8% chance of exploitation in the next 30 days. Legion of the Bouncy Castle Legion of the Bouncy Castle Java Cryptography APIs 1.58 up to but not including 1.60 contains a CWE-470: Use of Externally-Controlled Input to Select Classes or Code…
CVE-2018-11040, published 2018-06-25. High severity, CVSS 7.5. EPSS: 3.2% chance of exploitation in the next 30 days. Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-domain requests via JSONP (JSON with Padding) through…
CVE-2018-1257, published 2018-05-11. Medium severity, CVSS 6.5. EPSS: 3% chance of exploitation in the next 30 days. Spring Framework, versions 5.0.x prior to 5.0.6, versions 4.3.x prior to 4.3.17, and older unsupported versions allows applications to expose STOMP over WebSocket endpoints with a simple, in-memory…
CVE-2018-3246, published 2018-10-17. High severity, CVSS 7.5. EPSS: 2.9% chance of exploitation in the next 30 days. Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). Supported versions that are affected are 12.1.3.0 and 12.2.1.3. Easily…
CVE-2018-11039, published 2018-06-25. Medium severity, CVSS 5.9. EPSS: 2.7% chance of exploitation in the next 30 days. Spring Framework (versions 5.0.x prior to 5.0.7, versions 4.3.x prior to 4.3.18, and older unsupported versions) allow web applications to change the HTTP request method to any HTTP method (including…
CVE-2026-46981, published 2026-07-21. High severity, CVSS 7.2. EPSS: 0.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: Mobile). Supported versions that are affected are 2.5.0.1.0-2.5.0.1.17,…
CVE-2026-46980, published 2026-07-21. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: Mobile). Supported versions that are affected are 2.5.0.1.0-2.5.0.1.17,…
CVE-2026-46948, published 2026-07-21. Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days. Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: Security). Supported versions that are affected are 2.4.0.1.0-2.4.0.1.32,…