CVE-2022-21429

Опубликовано: 19 июл. 2022

Источник: nvd

CVSS3: 8.1

EPSS Низкий

Описание

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Billing Care). Supported versions that are affected are 12.0.0.4.0-12.0.0.6.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications Billing and Revenue Management. Successful attacks of this vulnerability can result in takeover of Oracle Communications Billing and Revenue Management. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).

Ссылки

https://www.oracle.com/security-alerts/cpujul2022.html
Vendor Advisory
https://www.oracle.com/security-alerts/cpujul2022.html
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:oracle:communications_billing_and_revenue_management:*:*:*:*:*:*:*:*

Версия от 12.0.0.4.0 (включая) до 12.0.0.6.0 (включая)

EPSS

Процентиль: 87%

0.03628

Низкий

8.1 High

CVSS3

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-w9cr-7pg5-crxj

CVSS3: 8.1

github

больше 3 лет назад

BDU:2022-04759

CVSS3: 7.3

fstec