Oracle Communications Billing and Revenue Management Vulnerability in Billing Care
CVE-2022-21572
Key Information:
- Vendor
Oracle
- Vendor
- CVE Published:
- 19 July 2022
What is CVE-2022-21572?
A vulnerability exists in Oracle Communications Billing and Revenue Management's Billing Care component, affecting versions 12.0.0.4.0 through 12.0.0.6.0. An attacker with minimal privileges and network access via HTTP can exploit this vulnerability, potentially leading to unauthorized modifications or deletions of data. Successful exploitation requires interaction from a user other than the malicious actor, which increases the complexity of attacks. This weakness can also adversely affect other integrated products, highlighting its broader impact beyond the main application.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Communications Billing and Revenue Management 12.0.0.4.0-12.0.0.6.0
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved