VDB
OSA-39141815
OSA-39141815
PUBLISHED
CVSS 7.5 HIGH
Vulnerability in the Oracle Communications Cloud Native Core Policy product of Oracle Communications (component: Install (Netty)). The supported version that is affected is 25.1.200. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications Cloud Native Core Policy. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Communications Cloud Native Core Policy accessible data. CVSS 3.1 Base Score 7.5 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle | Oracle Database Server(Clusterware) Version 19.3-19.30 | Oracle Database Server(Clusterware) Version 19.3-19.30, Oracle Database Server(Clusterware) Version 19.3-19.30 |
| Oracle | Oracle Communications Cloud Native Core Policy Version 25.1.200 | Oracle Communications Cloud Native Core Policy Version 25.1.200 |
| Oracle | Oracle Database Server(Clusterware) Version 23.4.0-23.26.1 | Oracle Database Server(Clusterware) Version 23.4.0-23.26.1, Oracle Database Server(Clusterware) Version 23.4.0-23.26.1 |
Timeline
- Apr 24, 2026 CVE Published