CVE-2025-30729: Improper Access Control

Vulnerability in the Oracle Communications Order and Service Management product of Oracle Communications Applications component: Security. Supported versions that are affected are 7.4.0, 7.4.1 and 7.5.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP ...

CVE-2025-21554: Incorrect Authorization

Vulnerability in the Oracle Communications Order and Service Management product of Oracle Communications Applications component: Security. Supported versions that are affected are 7.4.0, 7.4.1 and 7.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP...

PT-2025-4266 · Oracle · Oracle Communications Order/Service Management

Name of the Vulnerable Software and Affected Versions: Oracle Communications Order and Service Management versions 7.4.0 through 7.5.0 Description: The issue is related to improper permission storage in the Oracle Communications Order and Service Management product, allowing a low-privileged...

CVE-2025-21544: Improper Preservation of Permissions

Vulnerability in the Oracle Communications Order and Service Management product of Oracle Communications Applications component: Security. Supported versions that are affected are 7.4.0, 7.4.1 and 7.5.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP ...

CVE-2025-21542: Origin Validation Error

Vulnerability in the Oracle Communications Order and Service Management product of Oracle Communications Applications component: Security. Supported versions that are affected are 7.4.0, 7.4.1 and 7.5.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP ...

CVE-2023-22088: Undefined Security Weakness

Vulnerability in the Oracle Communications Order and Service Management product of Oracle Communications Applications component: User Management. Supported versions that are affected are 7.4.0 and 7.4.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP ...

Vulnerabilities fixed in Oracle Communications Applications

Vulnerabilities have been fixed in Oracle Communications Applications. The vulnerabilities allow a malicious party to perform attacks that result in the following categories of damage: Denial-of-Service DoS Manipulation of data Remote code execution User rights Access to sensitive data Access to...

CVE-2018-2756

Vulnerability in the Oracle Communications Order and Service Management component of Oracle Communications Applications subcomponent: WebUI. Supported versions that are affected are 7.2.4.3.0, 7.3.0.1.x, 7.3.1.0.7 and 7.3.5.0.x. Easily exploitable vulnerability allows low privileged attacker with...

CVE-2018-2756: Undefined Security Weakness

Vulnerability in the Oracle Communications Order and Service Management component of Oracle Communications Applications subcomponent: WebUI. Supported versions that are affected are 7.2.4.3.0, 7.3.0.1.x, 7.3.1.0.7 and 7.3.5.0.x. Easily exploitable vulnerability allows low privileged attacker with...

PT-2018-15785

Name of the Vulnerable Software and Affected Versions Oracle Communications Order and Service Management versions 7.2.4.3.0, 7.3.0.1.x, 7.3.1.0.7, 7.3.5.0.x Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Communications Order and Service...

PT-2018-15617

Name of the Vulnerable Software and Affected Versions Oracle Communications Order and Service Management versions 7.2.4.1.x through 7.3.0.1.x Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Communications Order and Service Management...

CVE-2018-2567: Undefined Security Weakness

Vulnerability in the Oracle Communications Order and Service Management component of Oracle Communications Applications subcomponent: Portal. Supported versions that are affected are 7.2.4.1.x, 7.2.4.2.x, 7.3.0.x.x and 7.3.0.1.x. Easily exploitable vulnerability allows unauthenticated attacker wi...