Communications Unified Inventory Management
75 CVEs tracked. 2 of them are in CISA KEV.
This hub aggregates every CVE we track for Communications Unified Inventory Management, a product in the communications space. Use it to gauge the current risk picture and drill into individual advisories.
Communications Unified Inventory Management CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 1 |
| 2026-08 | 2 |
| 2026-09 | 0 |
Severity
How the 75 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical4
- High46
- Medium24
- Low1
Latest CVEs
The 15 most recently published vulnerabilities affecting Communications Unified Inventory Management.
- CVE-2026-71143Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Third Party). Supported versions that are affected are 7.5.0, 7.5.1, 7.6.0-7.8....7.4
- CVE-2026-71142Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security Component). Supported versions that are affected are 7.5.0-7.5.1, 7.6....7.5
- CVE-2026-61095Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security). Supported versions that are affected are 7.5.0, 7.5.1, 7.6.0, 7.7.0,...7.1
- CVE-2022-22965A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a W...9.8
- CVE-2022-23632Traefik skips the router TLS configuration when the host header is an FQDN7.4
- CVE-2022-23307A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution.8.8
- CVE-2022-23305SQL injection in JDBC Appender in Apache Log4j V19.8
- CVE-2022-23302Deserialization of untrusted data in JMSSink in Apache Log4j 1.x8.8
- CVE-2021-45105Apache Log4j2 does not always protect from infinite recursion in lookup evaluation5.9
- CVE-2021-4104Deserialization of untrusted data in JMSAppender in Apache Log4j 1.27.5
- CVE-2021-39150A Server-Side Forgery Request vulnerability in XStream via PriorityQueue unmarshaling8.5
- CVE-2021-39152A Server-Side Forgery Request vulnerability in XStream via HashMap unmarshaling8.5
- CVE-2021-39140XStream can cause a Denial of Service6.5
- CVE-2021-39149XStream is vulnerable to an Arbitrary Code Execution attack8.5
- CVE-2021-39148XStream is vulnerable to an Arbitrary Code Execution attack8.5
Product grouping is registry-driven, with AI assist and human review. How it works