CVE-2022-21574: Medium severity oracle communications billing and revenue management vulnerability
Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Connection Manager). Supported versions that are affected are 12.0.0.4.0-12.0.0.6.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications Billing and Revenue Management. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Communications Billing and Revenue Management. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID for this Oracle Communications Billing and Revenue Management vulnerability?
The vulnerability ID for this Oracle Communications Billing and Revenue Management vulnerability is CVE-2022-21574.
What is the affected software for this vulnerability?
The affected software for this vulnerability is the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (specifically the Connection Manager component).
What versions of the Oracle Communications Billing and Revenue Management product are affected?
Versions 12.0.0.4.0 through 12.0.0.6.0 of the Oracle Communications Billing and Revenue Management product are affected.
What is the severity rating of this vulnerability?
The severity rating of this vulnerability is medium, with a severity value of 5.3.
Is it easy to exploit this vulnerability?
Yes, this vulnerability is easily exploitable by an unauthenticated attacker with network access.