Vulnerability in Oracle Communications Order and Service Management

CVE-2025-21544

What is CVE-2025-21544?

This vulnerability affects the Oracle Communications Order and Service Management product, enabling low-privileged attackers with network access via HTTP to potentially compromise the system. Successful exploitation requires human interaction from individuals other than the attacker, which may broaden the impact beyond just the affected product. Attackers could gain unauthorized update, insert, or delete access to sensitive data within the system, as well as unauthorized read access to certain accessible data.

References