Multiple critical vulnerabilities in Oracle Communications products (CVSS Base Score 9.8) allow remote attackers, either anonymous or authenticated, to compromise confidentiality, integrity, and availability. The affected versions are numerous, including but not limited to versions up to and including 24.2.2, 9.0.2.0.0, and 9.1.1.9. A mitigation is available, but the article does not specify a fixed version or provide patch details.
[WID-SEC-2025-0148] Oracle Communications: Mehrere Schwachstellen CVSS Base Score 9.8 (kritisch) CVSS Temporal Score 8.5 (hoch) Remoteangriff ja Datum 21.01.2025 Stand UPDATE 12.08.2026 Mitigation ja Betroffene Systeme Betriebssystem Linux Sonstiges UNIX Windows Produktbeschreibung Oracle Communications umfasst branchenspezifische Lösungen für die Telekommunikationsbranche. Produkte UPDATE 11.08.2026 IBM InfoSphere Information Server 21.01.2025 Oracle Communications 9.0 Oracle Communications 5.1 Oracle Communications 15.0.0.0.0 Oracle Communications 23.4.0 Oracle Communications 24.1.0 Oracle Communications 5.2 Oracle Communications 23.4.4 Oracle Communications 24.2.0 Oracle Communications 4.1.0 Oracle Communications 4.2.0 Oracle Communications 9.2.0 Oracle Communications 9.3.0 Oracle Communications 24.2.1 Oracle Communications 24.1.1 Oracle Communications <=24.2.2 Oracle Communications 14.0 Oracle Communications 8.2.3.0.0 Oracle Communications <=9.0.2.0.0 Oracle Communications 12.11 Oracle Communications <=9.1.1.8 Oracle Communications 8.0 Oracle Communications 8.1 Oracle Communications <=9.1.1.9 Oracle Communications 24.3.0 Oracle Communications 24.2.3 Oracle Communications 8.6.0.4.0 Oracle Communications 47.0.0.0.0 Oracle Communications 9.0.0.0.0 Oracle Communications 15.0 Angriff Angriff Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Communications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden. CVE Informationen Versionshistorie Feedback zum Advisory geben