5.3
Medium
CVE-2025-21554 Vulnerability in the Oracle Communications Order and Service Management product of Oracle Communications Applications…
Description
Vulnerability in the Oracle Communications Order and Service Management product of Oracle Communications Applications (component: Security). Supported versions that are affected are 7.4.0, 7.4.1 and 7.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications Order and Service Management. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Communications Order and Service Management accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Oracle Communications Order and Service Management | 7.5.0 | No fix stated |
| Oracle Communications Order and Service Management 7.4 | 7.4.0 → 7.4.1 | No fix stated |
Other CVEs of Oracle Communications Order and Service Management
The 4 CVEs of Oracle Communications Order and Service Management →
CVE-2025-30729
Vulnerability in the Oracle Communications Order and Service Management product of Oracle Communications Applications…
5.5
Medium
CVE-2025-21542
Vulnerability in the Oracle Communications Order and Service Management product of Oracle Communications Applications…
6.3
Medium
CVE-2025-21544
Vulnerability in the Oracle Communications Order and Service Management product of Oracle Communications Applications…
5.4
Medium