CVE-2026-91628

Vulnerability in Oracle Communications Billing and Revenue Management (BRM Server component) affects versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. An easily exploitable network attack by an unauthenticated attacker can result in unauthorized update, insert or delete access to some data and unauthorized read access to a subset of data.

Vulnerability in the Oracle Communications Billing and Revenue Management product (component: BRM Server) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0. An unauthenticated attacker with network access via HTTP can easily exploit it to gain unauthorized creation, deletion, or modification access to critical data.

Vulnerability in Oracle Communications Billing and Revenue Management (Platform component) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. A difficult to exploit vulnerability allows a low privileged attacker with logon to the infrastructure to gain unauthorized access to critical data or complete access to all accessible data.

Vulnerability in Oracle Communications Billing and Revenue Management (component: Platform) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. An easily exploitable attack by a low privileged user with local logon to the infrastructure can lead to takeover of the system.

Vulnerability in Oracle Communications Billing and Revenue Management (Platform component) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. A high-privileged attacker with local logon to the infrastructure can take over the product.

Vulnerability in Oracle Communications Billing and Revenue Management (Platform component) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. A high-privileged attacker with local logon to the infrastructure can take over the product.

Vulnerability in the Oracle Communications Billing and Revenue Management product (component: BRM Server), affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized update, insert, or delete access to some data and unauthorized read access to a subset of data.

Vulnerability in Oracle Communications Billing and Revenue Management (BRM Server component) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0. Easily exploitable by a low-privileged attacker with logon to the infrastructure, allowing unauthorized access to critical data or complete access to all accessible data.

Vulnerability in Oracle Communications Billing and Revenue Management (component BRM Server) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. An easily exploitable network attack via HTTP allows an unauthenticated attacker to gain unauthorized access to critical data or all accessible data.

Vulnerability in Oracle Communications Billing and Revenue Management (component BRM Server) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. An easily exploitable network attack via HTTP allows an unauthenticated attacker to gain unauthorized access to critical data and modify some data.