Oracle Communications Billing and Revenue Management vulnerabilities
14 known CVE vulnerabilities in Oracle Communications Billing and Revenue Management, translated and rated.
- CVE-2026-101606Medium
Vulnerability in Oracle Communications Billing and Revenue Management (BRM Server component) affects versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. An easily exploitable network attack by an unauthenticated attacker can result in unauthorized update, insert or delete access to some data and unauthorized read access to a subset of data.
- CVE-2026-101765Critical
Vulnerability in the Oracle Communications Billing and Revenue Management product (component: BRM Server) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0. An unauthenticated attacker with network access via HTTP can easily exploit it to gain unauthorized creation, deletion, or modification access to critical data.
- CVE-2026-91629Medium
Vulnerability in Oracle Communications Billing and Revenue Management (Platform component) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. A difficult to exploit vulnerability allows a low privileged attacker with logon to the infrastructure to gain unauthorized access to critical data or complete access to all accessible data.
- CVE-2026-91628Medium
Vulnerability in Oracle Communications Billing and Revenue Management (BRM Server component) affects versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. An easily exploitable flaw allows a low-privileged attacker with logon to the infrastructure to gain unauthorized access to critical data.
- CVE-2026-91627High
Vulnerability in Oracle Communications Billing and Revenue Management (component: Platform) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. An easily exploitable attack by a low privileged user with local logon to the infrastructure can lead to takeover of the system.
- CVE-2026-87297Medium
Vulnerability in Oracle Communications Billing and Revenue Management (Platform component) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. A high-privileged attacker with local logon to the infrastructure can take over the product.
- CVE-2026-83406Medium
Vulnerability in Oracle Communications Billing and Revenue Management (Platform component) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. A high-privileged attacker with local logon to the infrastructure can take over the product.
- CVE-2026-101807Medium
Vulnerability in the Oracle Communications Billing and Revenue Management product (component: BRM Server), affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized update, insert, or delete access to some data and unauthorized read access to a subset of data.
- CVE-2026-101764Medium
Vulnerability in Oracle Communications Billing and Revenue Management (BRM Server component) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0. Easily exploitable by a low-privileged attacker with logon to the infrastructure, allowing unauthorized access to critical data or complete access to all accessible data.
- CVE-2026-101759High
Vulnerability in Oracle Communications Billing and Revenue Management (component BRM Server) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. An easily exploitable network attack via HTTP allows an unauthenticated attacker to gain unauthorized access to critical data or all accessible data.
- CVE-2026-101758High
Vulnerability in Oracle Communications Billing and Revenue Management (component BRM Server) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. An easily exploitable network attack via HTTP allows an unauthenticated attacker to gain unauthorized access to critical data and modify some data.
- CVE-2026-101680High
Vulnerability in Oracle Communications Billing and Revenue Management (Platform component) versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0. A difficult-to-exploit network attack via TLS allows an unauthenticated attacker to create, delete, or modify critical data and access it. CVSS 7.4.
- CVE-2026-61126High
Vulnerability in Oracle Communications Billing and Revenue Management (component: Platform) versions 15.0.0.0.0-15.0.1.0.0 and 15.1.0.0.0-15.2.0.0.0. A low-privileged attacker with local access can fully compromise the system.
- CVE-2026-61091High
In Oracle Communications Billing and Revenue Management versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0, an easily exploitable vulnerability allows a low-privileged attacker with logon to the infrastructure to compromise the system. Successful attacks can result in takeover of the system.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

