Communications Converged Application Server vulnerabilities

6 known vulnerabilities in Communications Converged Application Server from Oracle. 6 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Oracle Communications Converged Application…: Improper Access Control

  CVE-2026-61226Jul 21, 2026Oracle

  Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: RTP Proxy). The supported version that is affected is 8.3. Difficult to exploit vulnerability allows high privileged attacker with logon to the

• 8.1 High severity

  Oracle Communications Converged Application…: Improper Privilege Management

  CVE-2026-61225Jul 21, 2026Oracle

  Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: Core). Supported versions that are affected are 8.2 and 8.3. Difficult to exploit vulnerability allows unauthenticated attacker with network ac

• 8.0 High severity

  Oracle Communications Converged Application…: Improper Access Control

  CVE-2026-61224Jul 21, 2026Oracle

  Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: Security). The supported version that is affected is 8.3. Difficult to exploit vulnerability allows high privileged attacker with network acces

• 9.0 Critical severity

  Oracle Communications Converged Application…: Improper Access Control

  CVE-2026-61223Jul 21, 2026Oracle

  Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: Security). Supported versions that are affected are 8.2 and 8.3. Difficult to exploit vulnerability allows unauthenticated attacker with networ

• 9.8 Critical severity

  Communications Converged Application Server: Improper Control of Generation of Code

  CVE-2023-21890Jan 18, 2023Oracle

  Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: Core). Supported versions that are affected are 7.1.0 and 8.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network

• 9.8 Critical severity

  Oracle WebLogic Server, Injection Exploited

  CVE-2019-2725Apr 26, 2019OracleEPSS 100%

  Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network ac