Communications Applications
Vendor:
First CVE: Oct 15, 2014 · Active for 11 years
5
Total CVEs
More Total CVEs than 79% of tracked products
1.7
Avg CVEs / Year
Higher CVE frequency than 62% of tracked products
7.3
Avg CVSS
Higher Avg CVSS than 49% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Communications Applications over time
Volume of CVEsAvg CVSS Base Score
First CVE
Oct 15, 2014
11 years ago
Most Recent CVE
Jul 15, 2020
2,203 days ago
CVE Severity & Scoring
Communications Applications5 CVEs
40%
60%
All CVEs352,785 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local0 (0.0%)
Network1 (20.0%)
Unknown4 (80.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low1 (20.0%)
High0 (0.0%)
Unknown4 (80.0%)
User Interaction
None0 (0.0%)
Unknown4 (80.0%)
Required1 (20.0%)
Privileges Required
Low1 (20.0%)
High0 (0.0%)
None0 (0.0%)
Unknown4 (80.0%)
Top CVEs
Signals from CVEs in this product scope (5 CVEs).
5 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2014-6598HIGH Unspecified vulnerability in the Oracle Communications Diameter Signaling Router component in Oracle Communications Applications 3.x, 4.x, and 5.0 allows remote attackers to affect | Jan 21, 2015 | 7.6 | 26 | NO | NO |
CVE-2015-2608HIGH Unspecified vulnerability in (1) the Oracle Communications Diameter Signaling Router (DSR) component in Oracle Communications Applications 4.1.6 and earlier, 5.1.0 and earlier, 6.0 | Oct 21, 2015 | 10.0 | 25 | NO | NO |
CVE-2020-14580HIGH Vulnerability in the Oracle Communications Session Border Controller product of Oracle Communications Applications (component: System Admin). Supported versions that are affected a | Jul 15, 2020 | 8.2 | 24 | NO | NO |
CVE-2014-6465MEDIUM Unspecified vulnerability in the Oracle Communications Session Border Controller component in Oracle Communications Applications SCX640m5 allows remote authenticated users to affec | Oct 15, 2014 | 6.3 | 17 | NO | NO |
CVE-2015-4793MEDIUM Unspecified vulnerability in the Oracle Communications Convergence component in Oracle Communications Applications 2.0 and 3.0.1 allows remote attackers to affect confidentiality v | Oct 21, 2015 | 4.3 | 14 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (5 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (5 CVEs).
Media Mentions
Signals from CVEs in this product scope (5 CVEs).
Top CNAs Publishing CVEs For Communications Applications
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| scx640m5 | 1 | 6.3 | 1.0% | 0 | 0 |
| 8.3.0 | 1 | 8.2 | 1.0% | 0 | 0 |
| 8.2.0 | 1 | 8.2 | 1.0% | 0 | 0 |
| 8.1.0 | 1 | 8.2 | 1.0% | 0 | 0 |
| 5.0 | 1 | 7.6 | 4.5% | 0 | 0 |
| 4.0 | 1 | 7.6 | 4.5% | 0 | 0 |
| 3.0.1 | 1 | 4.3 | 1.7% | 0 | 0 |
| 3.0 | 1 | 7.6 | 4.5% | 0 | 0 |
| 2.0 | 1 | 4.3 | 1.7% | 0 | 0 |