Vulnerability in Oracle Communications Billing and Revenue Management by Oracle
CVE-2022-21276

9.9CRITICAL

Key Information:

Vendor

Oracle
Status
Communications Billing And Revenue Management
Vendor
CVE Published:
19 January 2022

What is CVE-2022-21276?

An exploitable vulnerability in Oracle Communications Billing and Revenue Management’s Connection Manager component allows an attacker with low privileges and network access via HTTP to compromise the system. This could potentially lead to a complete takeover of the affected billing services. Although primarily impacting Oracle Communications Billing and Revenue Management, the ramifications of successfully exploiting this vulnerability could extend to other interconnected products, raising concerns about overall system security and data integrity.

Affected Version(s)

Communications Billing and Revenue Management 12.0.0.3

Communications Billing and Revenue Management 12.0.0.4

References

https://www.oracle.com/security-alerts/cpujan2022.html
x_refsource_MISC

CVSS V3.1

Score:
9.9
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2022-21276 : Vulnerability in Oracle Communications Billing and Revenue Management by Oracle