Vulnerability in Oracle Communications Order and Service Management by Oracle

CVE-2025-30729

What is CVE-2025-30729?

A security vulnerability in the Oracle Communications Order and Service Management product allows a low-privileged attacker with HTTP network access to compromise the system. Exploitation requires human interaction from a third party, leading to unauthorized updates, inserts, or deletions of accessible data. The vulnerability can also enable unauthorized read access to sensitive data and result in a partial denial of service. Affected versions include 7.4.0, 7.4.1, and 7.5.0, highlighting critical security considerations for users.

References