CVE-2022-21573: Medium severity oracle communications billing and revenue management vulnerability
Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Billing Care). Supported versions that are affected are 12.0.0.4.0-12.0.0.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Communications Billing and Revenue Management. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Communications Billing and Revenue Management. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID for this Oracle Communications Billing and Revenue Management vulnerability?
The vulnerability ID for this Oracle Communications Billing and Revenue Management vulnerability is CVE-2022-21573.
What is the affected version of Oracle Communications Billing and Revenue Management?
The affected versions of Oracle Communications Billing and Revenue Management are 12.0.0.4.0 to 12.0.0.6.0.
What is the severity level of CVE-2022-21573?
The severity level of CVE-2022-21573 is medium, with a severity value of 6.5.
How can a low privileged attacker exploit this vulnerability?
A low privileged attacker with network access can easily exploit this vulnerability in Oracle Communications Billing and Revenue Management.
Where can I find more information about this Oracle Communications Billing and Revenue Management vulnerability?
You can find more information about this Oracle Communications Billing and Revenue Management vulnerability on the Oracle Security Alerts page: https://www.oracle.com/security-alerts/cpujul2022.html