CVE-2026-71142

HighCVSS 7.5

Published: 18/08/2026(UTC)Updated: 19/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.40%

33th percentile - higher than 33% of all known CVEs

Summary

Vulnerability in Oracle Communications Unified Inventory Management product (component: Security Component) in versions 7.5.0-7.5.1, 7.6.0-7.8.0 and 8.0.1. Easily exploitable by unauthenticated attacker via HTTP. Successful attacks can result in unauthorized access to critical data or complete access to all system accessible data. CVSS 7.5.

Risk Assessment

Risk of confidentiality breach, including access to critical information.

Recommendation

Apply patches for affected versions and restrict access to the HTTP service.

Original NVD description (English source)

Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security Component). Supported versions that are affected are 7.5.0-7.5.1, 7.6.0-7.8.0 and 8.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications Unified Inventory Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Communications Unified Inventory Management accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).