5.3
Moyenne
CVE-2025-21554 Vulnerability in the Oracle Communications Order and Service Management product of Oracle Communications Applications…
Description
Vulnerability in the Oracle Communications Order and Service Management product of Oracle Communications Applications (component: Security). Supported versions that are affected are 7.4.0, 7.4.1 and 7.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications Order and Service Management. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Communications Order and Service Management accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Oracle Communications Order and Service Management | 7.5.0 | Pas de correctif indiqué |
| Oracle Communications Order and Service Management 7.4 | 7.4.0 → 7.4.1 | Pas de correctif indiqué |
Références
- Oracle Advisory www.oracle.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Oracle Communications Order and Service Management
Les 4 CVE de Oracle Communications Order and Service Management →
CVE-2025-30729
Vulnerability in the Oracle Communications Order and Service Management product of Oracle Communications Applications…
5.5
Moyenne
CVE-2025-21542
Vulnerability in the Oracle Communications Order and Service Management product of Oracle Communications Applications…
6.3
Moyenne
CVE-2025-21544
Vulnerability in the Oracle Communications Order and Service Management product of Oracle Communications Applications…
5.4
Moyenne