CVE-2026-61053

Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product (component: Cloud native deployment) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0. An unauthenticated attacker with network access via RMI can easily exploit it to take over Elastic Charging Engine.

Vulnerability in Oracle Communications BRM - Elastic Charging Engine (component Core) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable by a low-privileged attacker with logon to the infrastructure, allowing unauthorized access to critical data or complete access to all accessible data.

Vulnerability in Oracle Communications BRM - Elastic Charging Engine (component Security) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Difficult to exploit, it allows an unauthenticated attacker with access to the physical communication segment to create, delete or modify critical data and read a subset of accessible data.

Vulnerability in Oracle Communications BRM - Elastic Charging Engine (component: Security) affecting version 15.2.0.0.0. An easily exploitable flaw allows a low-privileged attacker with network access via TLS to create, delete or modify critical data and gain full access to all accessible data.

Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product (component: Security) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. An easily exploitable vulnerability allows a low privileged attacker with logon to the infrastructure to gain unauthorized read access to a subset of Elastic Charging Engine accessible data.