Oracle Communications: Mehrere Schwachstellen
WID-SEC-2025-0148 · updated 12.08.2026 · CVSS 9,8
What it is about
Oracle Communications: Mehrere Schwachstellen
Under what conditions?
The BSI does not name any particular preconditions.
Am I affected?
The BSI does not list individual versions; the vendor notices below are what counts.
What helps?
Install the updates provided by the vendor; details in the sources below.
Is the vulnerability already being exploited?
- CVE-2024-38475: exploited in the wild according to CISA, in the catalogue since 01.05.2025.
- CVE-2023-46604: exploited in the wild according to CISA, in the catalogue since 02.11.2023, also for ransomware.
- According to a CISA advisory, used by actors from : #StopRansomware: RansomHub Ransomware (08/2024)
- According to a CISA advisory, used by actors from North Korea: North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs (07/2024)
Information and sources
CVE: CVE-2023-40577, CVE-2023-46218, CVE-2023-46604, CVE-2023-50868, CVE-2023-5678, CVE-2024-0450, CVE-2024-25638, CVE-2024-28219, CVE-2024-28834, CVE-2024-33602, CVE-2024-34064, CVE-2024-34750, CVE-2024-35195, CVE-2024-3596, CVE-2024-37371, CVE-2024-37891, CVE-2024-38475, CVE-2024-38807, CVE-2024-38819, CVE-2024-38827 …
Source: BSI warning and information service (CERT-Bund); CISA. The assessment of the conditions is my reading of the BSI text; the external pages are in their original language.