VDB
OSA-37362104
OSA-37362104
PUBLISHED
CVSS 4.400000095367432 MEDIUM
Vulnerability in the Oracle Communications Cloud Native Core Policy product of Oracle Communications (component: Alarms, KPI, and Measurements (urllib3)). Supported versions that are affected are 24.2.0-24.2.2. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Communications Cloud Native Core Policy. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Communications Cloud Native Core Policy accessible data. CVSS 3.1 Base Score 4.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N).
Risk Scores
CVSS 3.1
4.400000095367432
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle | Oracle Utilities Network Management System Version 2.6.0.1.7 | Oracle Utilities Network Management System Version 2.6.0.1.7 |
| Oracle | Oracle Communications Unified Assurance Version 6.0.0-6.0.5 | Oracle Communications Unified Assurance Version 6.0.0-6.0.5 |
| Oracle | Oracle Communications Billing and Revenue Management(Billing Care) Version 15.0.0.0-15.0.0.1 | Oracle Communications Billing and Revenue Management(Billing Care) Version 15.0.0.0-15.0.0.1 |
| Oracle | Oracle Communications Billing and Revenue Management(Billing Care) Version 12.0.0.4-12.0.0.8 | Oracle Communications Billing and Revenue Management(Billing Care) Version 12.0.0.4-12.0.0.8 |
| Oracle | Oracle Communications User Data Repository Version 15.0 | Oracle Communications User Data Repository Version 15.0 |
| Oracle | Oracle Utilities Network Management System Version 2.5.0.2.9 | Oracle Utilities Network Management System Version 2.5.0.2.9 |
| Oracle | Oracle Communications Cloud Native Core Policy Version 24.2.0-24.2.2 | Oracle Communications Cloud Native Core Policy Version 24.2.0-24.2.2 |
| Oracle | Oracle Communications User Data Repository Version 14.0 | Oracle Communications User Data Repository Version 14.0 |
| Oracle | Oracle Communications Policy Management Version 15.0.0.0.0 | Oracle Communications Policy Management Version 15.0.0.0.0 |
| Oracle | PeopleSoft Enterprise PeopleTools Version 8.61 | PeopleSoft Enterprise PeopleTools Version 8.61 |
| Oracle | Oracle Communications User Data Repository Version 12.11 | Oracle Communications User Data Repository Version 12.11 |
| Oracle | Oracle Utilities Network Management System Version 2.5.0.1.15 | Oracle Utilities Network Management System Version 2.5.0.1.15 |
| Oracle | Oracle Business Intelligence Enterprise Edition Version 7.0.0.0.0 | Oracle Business Intelligence Enterprise Edition Version 7.0.0.0.0 |
| Oracle | PeopleSoft Enterprise PeopleTools Version 8.60 | PeopleSoft Enterprise PeopleTools Version 8.60 |
Timeline
- Feb 11, 2025 CVE Published