漏洞标题
N/A
漏洞描述信息
Oracle通信命令和服务管理组件(子组件：门户)中的漏洞。受影响的版本是7.2.4.1.x、7.2.4.2.x、7.3.0.x.x和7.3.0.1.x。容易利用的漏洞允许通过HTTP网络访问未经验证的黑客入侵Oracle通信命令和服务管理。成功的攻击需要非攻击者的人进行交互，虽然漏洞存在于Oracle通信命令和服务管理中，但攻击可能会对其他产品产生重大影响。利用此漏洞的成功攻击可能导致对Oracle通信命令和服务管理可访问数据的未经授权更新、插入或删除访问，以及对Oracle通信命令和服务管理可访问数据部分未经授权的读取访问。CVSS 3.0基础得分6.1(保密性和完整性影响)。CVSS向量：(CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)。
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
漏洞类别
N/A
漏洞标题
N/A
漏洞描述信息
Vulnerability in the Oracle Communications Order and Service Management component of Oracle Communications Applications (subcomponent: Portal). Supported versions that are affected are 7.2.4.1.x, 7.2.4.2.x, 7.3.0.x.x and 7.3.0.1.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications Order and Service Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Communications Order and Service Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Communications Order and Service Management accessible data as well as unauthorized read access to a subset of Oracle Communications Order and Service Management accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).
CVSS信息
N/A
漏洞类别
N/A
漏洞标题
Oracle Communications Applications Oracle Communications Order and Service Management组件安全漏洞
漏洞描述信息
Oracle Communications是美国甲骨文（Oracle）公司的一套用于快速交付和货币化数字生活通信的应用程序。Oracle Communications Order and Service Management是其中的一个用于协调内部BOSS系统之间的活动的组件。 Oracle Communications Applications中的Oracle Communications Order and Service Management组件的Portal子组件存在安全漏洞。攻击者可利用该漏洞未
CVSS信息
N/A
漏洞类别
授权问题