Skip to content
OpenAdvisories
High · 7.5 CVE-2022-21422 EUVD-2022-26646GHSA-f2m4-m473-4h7g

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Connect…

Published Apr 19, 2022 · Updated Sep 24, 2024 · Assigned by oracle

Description

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Connection Manager). Supported versions that are affected are 12.0.0.4 and 12.0.0.5. Difficult to exploit vulnerability allows low privileged attacker with network access via TCP to compromise Oracle Communications Billing and Revenue Management. Successful attacks of this vulnerability can result in takeover of Oracle Communications Billing and Revenue Management. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).

Affected products

VendorProductAffectedFixed
Oracle Communications Billing and Revenue Management 12.0.0.4, 12.0.0.5 —

References