CVE-2026-61091
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
In Oracle Communications Billing and Revenue Management versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0, an easily exploitable vulnerability allows a low-privileged attacker with logon to the infrastructure to compromise the system. Successful attacks can result in takeover of the system.
Risk Assessment
An attacker with local access can fully compromise the billing system, leading to data theft, invoice manipulation, and service disruption.
Recommendation
Apply the patch provided by Oracle for Oracle Communications Billing and Revenue Management.
Other vulnerabilities in Oracle Communications Billing and Revenue Management
Original NVD description (English source)
Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server). Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Communications Billing and Revenue Management executes to compromise Oracle Communications Billing and Revenue Management. Successful attacks of this vulnerability can result in takeover of Oracle Communications Billing and Revenue Management. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).