CVE-2026-61126: High severity Oracle Oracle Communications Billing and Revenue Management vulnerability
Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform). Supported versions that are affected are 15.0.0.0.0-15.0.1.0.0 and 15.1.0.0.0-15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Communications Billing and Revenue Management executes to compromise Oracle Communications Billing and Revenue Management. Successful attacks of this vulnerability can result in takeover of Oracle Communications Billing and Revenue Management. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Oracle Communications Billing and Revenue Management (Platform)to a version that resolves this vulnerability.Fixed in 15.2.0.0.0
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker needs a low-privileged account and logon access to the infrastructure where Oracle Communications Billing and Revenue Management is running. The attack is local and does not require user interaction.
Which releases are affected?
Affected supported releases are 15.0.0.0.0 through 15.0.1.0.0, and 15.1.0.0.0 through 15.2.0.0.0.
What is the potential impact of successful exploitation?
Successful exploitation can result in takeover of Oracle Communications Billing and Revenue Management, with high impacts to confidentiality, integrity, and availability.