Unauthenticated Network Vulnerability in Oracle Communications Billing and Revenue Management
CVE-2022-21429

8.1HIGH

Key Information:

Vendor

Oracle
Status
Communications Billing And Revenue Management
Vendor
CVE Published:
19 July 2022

What is CVE-2022-21429?

An unauthenticated network vulnerability exists in Oracle Communications Billing and Revenue Management, specifically within the Billing Care component. The flaw allows attackers with network access via HTTP to potentially take control of the system. This vulnerability affects versions 12.0.0.4.0 through 12.0.0.6.0, posing significant risks to the confidentiality, integrity, and availability of sensitive data.

Affected Version(s)

Communications Billing and Revenue Management 12.0.0.4.0-12.0.0.6.0

References

https://www.oracle.com/security-alerts/cpujul2022.html
x_refsource_MISC

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.