Vulnerabilities fixed in Oracle Communications Applications

Vulnerabilities have been fixed in Oracle Communications Applications products. A malicious party could exploit them to carry out attacks that can result in the following categories of damage: Denial-of-Service DoS. Remote code execution Administrator/Root privileges Access to sensitive data Acce...

CVE-2023-22088

...

CVE-2023-22088

...

CVE-2023-22088

CVE-2023-22088 affects Oracle Communications Order and Service Management (OCS) User Management in versions 7.4.0 and 7.4.1. The vulnerability arises from insufficient input validation in the User Management component, allowing a low-privilege, unauthenticated attacker with network access via HTT...