Communications Convergence
Vendor:
First CVE: Aug 8, 2017 · Active for 8 years
11
Total CVEs
More Total CVEs than 90% of tracked products
1.6
Avg CVEs / Year
Higher CVE frequency than 62% of tracked products
6.9
Avg CVSS
Higher Avg CVSS than 43% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Communications Convergence over time
Volume of CVEsAvg CVSS Base Score
First CVE
Aug 8, 2017
8 years ago
Most Recent CVE
Jan 18, 2023
1,287 days ago
CVE Severity & Scoring
Communications Convergence11 CVEs
45%
45%
9%
All CVEs353,173 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network11 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low8 (72.7%)
High3 (27.3%)
Unknown0 (0.0%)
User Interaction
None8 (72.7%)
Unknown0 (0.0%)
Required3 (27.3%)
Privileges Required
Low2 (18.2%)
High0 (0.0%)
None9 (81.8%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (11 CVEs).
11 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-45105MEDIUM Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker wit | Dec 18, 2021 | 5.9 | 76 | NO | NO |
CVE-2019-10086HIGH In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property | Aug 20, 2019 | 7.3 | 40 | NO | NO |
CVE-2018-1000613CRITICAL Legion of the Bouncy Castle Legion of the Bouncy Castle Java Cryptography APIs 1.58 up to but not including 1.60 contains a CWE-470: Use of Externally-Controlled Input to Select Cl | Jul 9, 2018 | 9.8 | 32 | NO | NO |
CVE-2020-28052HIGH An issue was discovered in Legion of the Bouncy Castle BC Java 1.65 and 1.66. The OpenBSDBCrypt.checkPassword utility method compared incorrect data when checking the password, all | Dec 18, 2020 | 8.1 | 30 | NO | NO |
CVE-2019-17359HIGH The ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigger a large attempted memory allocation, and resultant OutOfMemoryError error, via crafted ASN.1 data. This is f | Oct 8, 2019 | 7.5 | 29 | NO | NO |
CVE-2023-21848HIGH Vulnerability in the Oracle Communications Convergence product of Oracle Communications Applications (component: Admin Configuration). The supported version that is affected is 3 | Jan 18, 2023 | 8.8 | 26 | NO | NO |
CVE-2021-29425MEDIUM In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value, | Apr 13, 2021 | 4.8 | 24 | NO | NO |
CVE-2019-10219MEDIUM A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments an | Nov 8, 2019 | 6.1 | 23 | NO | NO |
CVE-2022-21338MEDIUM Vulnerability in the Oracle Communications Convergence product of Oracle Communications Applications (component: General Framework). The supported version that is affected is 3.0.2 | Jan 19, 2022 | 4.6 | 19 | NO | NO |
CVE-2018-2936MEDIUM Vulnerability in the Oracle Communications Messaging Server component of Oracle Communications Applications (subcomponent: Web Client). The supported version that is affected is 3. | Jul 18, 2018 | 6.1 | 19 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (11 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (11 CVEs).
Media Mentions
Signals from CVEs in this product scope (11 CVEs).
Top CNAs Publishing CVEs For Communications Convergence
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 3.0.3.1.0 | 1 | 8.8 | 0.6% | 0 | 0 |
| 3.0.3.0 | 1 | 5.9 | 100.0% | 0 | 0 |
| 3.0.2.2.0 | 6 | 6.1 | 25.0% | 0 | 0 |
| 3.0.2 | 1 | 9.8 | 4.8% | 0 | 0 |
| 3.0.1 | 2 | 6.7 | 1.5% | 0 | 0 |
| 3.0 | 1 | 7.2 | 1.6% | 0 | 0 |