CVE-2022-21573
First published: Tue Jul 19 2022(Updated: )
Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Billing Care). Supported versions that are affected are 12.0.0.4.0-12.0.0.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Communications Billing and Revenue Management. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Communications Billing and Revenue Management. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Communications Billing and Revenue Management | >=12.0.0.4.0<=12.0.0.6.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this Oracle Communications Billing and Revenue Management vulnerability?
The vulnerability ID for this Oracle Communications Billing and Revenue Management vulnerability is CVE-2022-21573.
What is the affected version of Oracle Communications Billing and Revenue Management?
The affected versions of Oracle Communications Billing and Revenue Management are 12.0.0.4.0 to 12.0.0.6.0.
What is the severity level of CVE-2022-21573?
The severity level of CVE-2022-21573 is medium, with a severity value of 6.5.
How can a low privileged attacker exploit this vulnerability?
A low privileged attacker with network access can easily exploit this vulnerability in Oracle Communications Billing and Revenue Management.
Where can I find more information about this Oracle Communications Billing and Revenue Management vulnerability?
You can find more information about this Oracle Communications Billing and Revenue Management vulnerability on the Oracle Security Alerts page: https://www.oracle.com/security-alerts/cpujul2022.html
- collector/nvd-index
- agent/type
- agent/softwarecombine
- agent/severity
- agent/remedy
- agent/references
- agent/author
- agent/tags
- agent/first-publish-date
- agent/event
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- vendor/oracle
- canonical/oracle communications billing and revenue management
- version/oracle communications billing and revenue management/12.0.0.4.0
- version/oracle communications billing and revenue management/12.0.0.6.0