Vulnerabilities

Filters

Reset all

2 selected

68 records

Sort

Vendor: Oracle Component: Communications Billing And Revenue Management Clear all filters

TI-2026-43770 CVE-2026-61126 · GHSA-vr53-qrqq-g8vw

Improper privilege management in Oracle Communications Billing and Revenue Management

LOW 35

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00161 Published 2026-07-21 No fix listed CWE-269

TI-2026-43735 CVE-2026-61091 · GHSA-c2q8-xvvx-f29v

Improper privilege management in Oracle Communications Billing and Revenue Management

LOW 35

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00161 Published 2026-07-21 No fix listed CWE-269

TI-2022-05980 CVE-2022-21601 · GHSA-qxhx-pm24-wjxj

Vulnerability in the Oracle Communications Billing and Revenue Management product of…

LOW 36

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Connection Manager).

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00757 Published 2022-10-18 No fix listed

TI-2022-05954 CVE-2022-21574 · GHSA-mxcf-jp8m-vh5r

Vulnerability in the Oracle Communications Billing and Revenue Management product of…

LOW 32

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Connection Manager).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01029 Published 2022-07-19 No fix listed

TI-2022-05953 CVE-2022-21573 · GHSA-m885-pp83-5gqq

Vulnerability in the Oracle Communications Billing and Revenue Management product of…

LOW 30

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Billing Care).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00776 Published 2022-07-19 No fix listed

TI-2022-05952 CVE-2022-21572 · GHSA-m2cv-hf8g-78c7

Vulnerability in the Oracle Communications Billing and Revenue Management product of…

LOW 25

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Billing Care).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00462 Published 2022-07-19 No fix listed

TI-2022-05815 CVE-2022-21429 · GHSA-w9cr-7pg5-crxj

Vulnerability in the Oracle Communications Billing and Revenue Management product of…

MEDIUM 40

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Billing Care).

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01365 Published 2022-07-19 No fix listed

TI-2022-05817 CVE-2022-21431 · GHSA-4xcj-gcpq-66r5

Vulnerability in the Oracle Communications Billing and Revenue Management product of…

MEDIUM 47

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Connection Manager).

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.0214 Published 2022-04-19 No fix listed

TI-2022-05816 CVE-2022-21430 · GHSA-hhw6-c67g-2894

Vulnerability in the Oracle Communications Billing and Revenue Management product of…

MEDIUM 41

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Connection Manager).

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.01211 Published 2022-04-19 No fix listed

TI-2022-05810 CVE-2022-21424 · GHSA-jhcw-9xgx-x5w3

Vulnerability in the Oracle Communications Billing and Revenue Management product of…

MEDIUM 41

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Connection Manager).

CVSS 3.1HIGH 8.3 Network Low privileges No interaction EPSS 0.01335 Published 2022-04-19 No fix listed

TI-2022-05808 CVE-2022-21422 · GHSA-f2m4-m473-4h7g

Vulnerability in the Oracle Communications Billing and Revenue Management product of…

LOW 37

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Connection Manager).

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.01022 Published 2022-04-19 No fix listed

TI-2020-18753 CVE-2020-36518 · GHSA-57j2-w4cx-62h2

jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of…

MEDIUM 47

jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0486 Published 2022-03-11 Partial fix · 2.13.2.1, 2.12.6.1 CWE-787

TI-2022-05780 CVE-2022-21391 · GHSA-jf48-9c8q-4q5v

Vulnerability in the Oracle Communications Billing and Revenue Management product of…

MEDIUM 45

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Connection Manager).

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01208 Published 2022-01-19 No fix listed

TI-2022-05779 CVE-2022-21390 · GHSA-226r-cf9r-2r9j

Vulnerability in the Oracle Communications Billing and Revenue Management product of…

MEDIUM 53

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Webservices Manager).

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.0237 Published 2022-01-19 No fix listed

TI-2022-05778 CVE-2022-21389 · GHSA-p9j5-85v2-2hhf

Vulnerability in the Oracle Communications Billing and Revenue Management product of…

MEDIUM 53

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Connection Manager).

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.0186 Published 2022-01-19 No fix listed

TI-2022-05667 CVE-2022-21276 · GHSA-gmhg-cx65-wg6j

Vulnerability in the Oracle Communications Billing and Revenue Management product of…

MEDIUM 45

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Connection Manager).

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01138 Published 2022-01-19 No fix listed

TI-2022-05666 CVE-2022-21275 · GHSA-q3fv-hvg5-9m79

Vulnerability in the Oracle Communications Billing and Revenue Management product of…

MEDIUM 52

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Connection Manager).

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01813 Published 2022-01-19 No fix listed

TI-2022-05659 CVE-2022-21268 · GHSA-p6p4-97gp-9hqv

Vulnerability in the Oracle Communications Billing and Revenue Management product of…

LOW 16

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Pipeline Manager).

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00316 Published 2022-01-19 No fix listed

TI-2022-05658 CVE-2022-21267 · GHSA-mm9f-mcc2-2gpj

Vulnerability in the Oracle Communications Billing and Revenue Management product of…

LOW 16

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Pipeline Manager).

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00316 Published 2022-01-19 No fix listed

TI-2022-05657 CVE-2022-21266 · GHSA-h95v-7jfp-9578

Vulnerability in the Oracle Communications Billing and Revenue Management product of…

MEDIUM 42

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Pipeline Manager).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01694 Published 2022-01-19 No fix listed

TI-2021-20437 CVE-2021-45105 · GHSA-p6xc-xr62-6r2g

Apache Log4j2 does not always protect from infinite recursion in lookup evaluation

HIGH 72

Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.99999 Published 2021-12-18 Partial fix · 2.17.0, 2.12.3 +5 CWE-20

TI-2021-02021 CVE-2021-2351 · GHSA-gm3p-p24r-4wxq

Broken or risky cryptographic algorithm in Oracle WebLogic Server

MEDIUM 41

Vulnerability in the Advanced Networking Option component of Oracle Database Server.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.02432 Published 2021-07-20 No fix listed CWE-327

TI-2021-14540 CVE-2021-36090 · GHSA-mc84-pj99-q6hh

Apache Commons Compress 1.0 to 1.20 denial of service vulnerability

MEDIUM 53

When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.12945 Published 2021-07-13 Partial fix · 1.21 CWE-130

TI-2021-14251 CVE-2021-35517 · GHSA-xqfj-vm6h-2x34

Apache Commons Compress 1.1 to 1.20 denial of service vulnerability

MEDIUM 52

When reading a specially crafted TAR archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.10614 Published 2021-07-13 Partial fix · 1.21 CWE-130

TI-2021-14250 CVE-2021-35516 · GHSA-crv7-7245-f45f

Apache Commons Compress 1.6 to 1.20 denial of service vulnerability

MEDIUM 47

When reading a specially crafted 7Z archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.12365 Published 2021-07-13 Partial fix · 1.21 CWE-130