Unauthorized Access Vulnerability in Oracle Communications Billing and Revenue Management

CVE-2022-21267

Summary

A vulnerability exists within the Oracle Communications Billing and Revenue Management product, specifically in the Pipeline Manager component. This weakness can be exploited by an attacker with low privileges who has logged onto the infrastructure where the application runs. By leveraging this vulnerability, attackers may gain unauthorized access to certain data within the application, potentially compromising sensitive information. The affected versions are 12.0.0.3 and 12.0.0.4. Organizations using these versions should consider implementing necessary security measures to mitigate exposure to this vulnerability.

References