Oracle Communications Converged Application Server vulnerabilities
4 known CVE vulnerabilities in Oracle Communications Converged Application Server, translated and rated.
- CVE-2026-61223Critical
Vulnerability in Oracle Communications Converged Application Server allows an unauthenticated attacker via TCP/IP to take over the server. Exploitation is difficult but may affect other products.
- CVE-2026-61226High
A vulnerability in Oracle Communications Converged Application Server (RTP Proxy component) version 8.3. Difficult to exploit, requires logon to infrastructure and high privileges. Successful attack can lead to server takeover and impact other products (scope change). CVSS 7.5.
- CVE-2026-61225High
Vulnerability in Oracle Communications Converged Application Server (Core component) versions 8.2 and 8.3. Difficult to exploit, allows an unauthenticated attacker with network access via TCP/IP to take over the server.
- CVE-2026-61224High
Vulnerability in Oracle Communications Converged Application Server version 8.3. Difficult to exploit, allows a high-privileged attacker with network access via TLS to take over the server and impact additional products.