CVE Catalog

CVE-2026-101759

HighCVSS 7.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.38%

31th percentile - higher than 31% of all known CVEs

Summary

Vulnerability in Oracle Communications Billing and Revenue Management (component BRM Server) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. An easily exploitable network attack via HTTP allows an unauthenticated attacker to gain unauthorized access to critical data or all accessible data.

Risk Assessment

May result in leakage of critical billing and business data, exposing the organization to financial loss and confidentiality breach.

Recommendation

Apply Oracle updates for BRM Server; restrict HTTP access to trusted networks and implement data access monitoring.

Other vulnerabilities in Oracle Communications Billing and Revenue Management

See all
Original NVD description (English source)

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server). Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications Billing and Revenue Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Communications Billing and Revenue Management accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS