Vulnerability in Oracle Communications Order and Service Management by Oracle
CVE-2025-30729
Key Information:
- Vendor
Oracle
- Vendor
- CVE Published:
- 15 April 2025
What is CVE-2025-30729?
A security vulnerability in the Oracle Communications Order and Service Management product allows a low-privileged attacker with HTTP network access to compromise the system. Exploitation requires human interaction from a third party, leading to unauthorized updates, inserts, or deletions of accessible data. The vulnerability can also enable unauthorized read access to sensitive data and result in a partial denial of service. Affected versions include 7.4.0, 7.4.1, and 7.5.0, highlighting critical security considerations for users.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Oracle Communications Order and Service Management 7.4.0
Oracle Communications Order and Service Management 7.4.1
Oracle Communications Order and Service Management 7.5.0
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved