Vulnerability in Oracle Communications Order and Service Management Portal

CVE-2018-2567

Summary

This vulnerability exists within the Oracle Communications Order and Service Management component, particularly in its Portal subcomponent. An unauthenticated attacker, with access to the network via HTTP, can exploit this vulnerability to compromise data. While successful exploitation requires human interaction from a source other than the attacker, it can lead to unauthorized access that may allow attackers to update, insert, or delete sensitive data, as well as read protected information. The implications of this security flaw could extend beyond the component itself, potentially impacting additional interconnected systems.

References