CVE-2022-21574
First published: Tue Jul 19 2022(Updated: )
Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Connection Manager). Supported versions that are affected are 12.0.0.4.0-12.0.0.6.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications Billing and Revenue Management. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Communications Billing and Revenue Management. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Communications Billing and Revenue Management | >=12.0.0.4.0<=12.0.0.6.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this Oracle Communications Billing and Revenue Management vulnerability?
The vulnerability ID for this Oracle Communications Billing and Revenue Management vulnerability is CVE-2022-21574.
What is the affected software for this vulnerability?
The affected software for this vulnerability is the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (specifically the Connection Manager component).
What versions of the Oracle Communications Billing and Revenue Management product are affected?
Versions 12.0.0.4.0 through 12.0.0.6.0 of the Oracle Communications Billing and Revenue Management product are affected.
What is the severity rating of this vulnerability?
The severity rating of this vulnerability is medium, with a severity value of 5.3.
Is it easy to exploit this vulnerability?
Yes, this vulnerability is easily exploitable by an unauthenticated attacker with network access.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- agent/severity
- agent/remedy
- agent/references
- agent/author
- agent/tags
- agent/first-publish-date
- agent/event
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- vendor/oracle
- canonical/oracle communications billing and revenue management
- version/oracle communications billing and revenue management/12.0.0.4.0
- version/oracle communications billing and revenue management/12.0.0.6.0