The vulnerability of the User Management sub-component of the Oracle Communications Order and Service Management component of the Oracle Communications Applications software and management system allows a malicious actor to gain unauthorized access to protected information.

🗓️ 23 Oct 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

The User Management sub-component in Oracle Communications Order and Service Management has input validation weakness enabling remote access to protected information.

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2023-22088	18 Oct 202302:44	–	circl
CNNVD	Oracle Communications Applications Security Vulnerability	17 Oct 202300:00	–	cnnvd
CVE	CVE-2023-22088	17 Oct 202321:03	–	cve
Cvelist	CVE-2023-22088	17 Oct 202321:03	–	cvelist
EUVD	EUVD-2023-26253	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Oracle Communications Applications	19 Oct 202300:00	–	ncsc
NVD	CVE-2023-22088	17 Oct 202322:15	–	nvd
Oracle	Oracle Critical Patch Update Advisory - October 2023	17 Oct 202300:00	–	oracle
OSV	CVE-2023-22088	17 Oct 202322:15	–	osv
Prion	Design/Logic Flaw	17 Oct 202322:15	–	prion

Vulners

Node

oracle oracle_communications_order_and_service_managementMatch7.4.1

oracle oracle_communications_order_and_service_managementMatch7.4.0

Source	Link
oracle	www.oracle.com/security-alerts/cpuoct2023.html
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2023101864
web	www.web.nvd.nist.gov/view/vuln/detail

23 Oct 2023 00:00Current

5.5Medium risk

Vulners AI Score5.5

CVSS 24

CVSS 34.3

EPSS0.00133