VDB

OSA-38723438

OSA-38723438 PUBLISHED

Vulnerability in the Oracle Communications Unified Assurance product of Oracle Communications (component: Core (Apache CXF)). Supported versions that are affected are 6.1.1-7.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications Unified Assurance. Successful attacks of this vulnerability can result in takeover of Oracle Communications Unified Assurance.

Affected Products

VendorProductVersions
OraclePrimavera P6 Enterprise Project Portfolio Management Version 24.12.0.0-24.12.13.0Primavera P6 Enterprise Project Portfolio Management Version 24.12.0.0-24.12.13.0
OraclePrimavera P6 Enterprise Project Portfolio Management Version 25.12.0.0Primavera P6 Enterprise Project Portfolio Management Version 25.12.0.0
OracleOracle Communications Unified Assurance Version 6.1.1-7.0.0Oracle Communications Unified Assurance Version 6.1.1-7.0.0

Timeline

  • Apr 24, 2026 CVE Published
Open in Interactive Console →
$ Console Community · 50/day Open console ›