7.2
High
CVE-2022-21395 Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation…
Description
Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). Supported versions that are affected are 3.4, 4.2, 4.3, 4.4 and 5.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Communications Operations Monitor. Successful attacks of this vulnerability can result in takeover of Oracle Communications Operations Monitor. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Communications Operations Monitor | 5.0 | No fix stated |
| Communications Operations Monitor | 4.4 | No fix stated |
| Communications Operations Monitor | 4.3 | No fix stated |
| Communications Operations Monitor | 4.2 | No fix stated |
| Communications Operations Monitor | 3.4 | No fix stated |
Other CVEs of Communications Operations Monitor
The 10 CVEs of Communications Operations Monitor →
CVE-2022-21403
Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation…
6.6
Medium
CVE-2022-21402
Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation…
4.8
Medium
CVE-2022-21401
Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation…
6.6
Medium
CVE-2022-21400
Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation…
5.4
Medium