Vulnerability in Oracle Communications Order and Service Management
CVE-2025-21544
Key Information:
- Vendor
Oracle
- Vendor
- CVE Published:
- 21 January 2025
What is CVE-2025-21544?
This vulnerability affects the Oracle Communications Order and Service Management product, enabling low-privileged attackers with network access via HTTP to potentially compromise the system. Successful exploitation requires human interaction from individuals other than the attacker, which may broaden the impact beyond just the affected product. Attackers could gain unauthorized update, insert, or delete access to sensitive data within the system, as well as unauthorized read access to certain accessible data.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Oracle Communications Order and Service Management 7.4.0
Oracle Communications Order and Service Management 7.4.1
Oracle Communications Order and Service Management 7.5.0
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved