VDB
OSA-39052232
OSA-39052232
PUBLISHED
CVSS 8 HIGH
Vulnerability in the Oracle Communications Cloud Native Core Service Communication Proxy product of Oracle Communications (component: ATS Framework (Jenkins)). Supported versions that are affected are 25.1.200 and 25.2.100. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Communications Cloud Native Core Service Communication Proxy. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Communications Cloud Native Core Service Communication Proxy.
Risk Scores
CVSS 3.1
8
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle | Oracle Communications Cloud Native Core Service Communication Proxy Version 25.1.200 | Oracle Communications Cloud Native Core Service Communication Proxy Version 25.1.200 |
| Oracle | Oracle Communications Cloud Native Core Network Exposure Function Version 24.2.1 | Oracle Communications Cloud Native Core Network Exposure Function Version 24.2.1, Oracle Communications Cloud Native Core Network Exposure Function Version 24.2.1 |
| Oracle | Oracle Communications Cloud Native Core Policy Version 25.1.200 | Oracle Communications Cloud Native Core Policy Version 25.1.200 |
| Oracle | Oracle Communications Cloud Native Core Service Communication Proxy Version 25.2.100 | Oracle Communications Cloud Native Core Service Communication Proxy Version 25.2.100 |
| Oracle | Oracle Communications Cloud Native Core Binding Support Function Version 25.1.200 | Oracle Communications Cloud Native Core Binding Support Function Version 25.1.200 |
| Oracle | Oracle Communications Cloud Native Core Security Edge Protection Proxy Version 25.1.200 | Oracle Communications Cloud Native Core Security Edge Protection Proxy Version 25.1.200 |
| Oracle | Oracle Communications Cloud Native Core Network Repository Function(Install) Version 25.1.204 | Oracle Communications Cloud Native Core Network Repository Function(Install) Version 25.1.204, Oracle Communications Cloud Native Core Network Repository Function(Install) Version 25.1.204 |
Timeline
- Apr 24, 2026 CVE Published