Oracle Communications Billing and Revenue Management vulnerabilities
4 known CVE vulnerabilities in Oracle Communications Billing and Revenue Management, translated and rated.
- CVE-2026-91627High
Vulnerability in Oracle Communications Billing and Revenue Management (component: Platform) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. An easily exploitable attack by a low privileged user with local logon to the infrastructure can lead to takeover of the system.
- CVE-2026-101765Critical
Vulnerability in the Oracle Communications Billing and Revenue Management product (component: BRM Server) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0. An unauthenticated attacker with network access via HTTP can easily exploit it to gain unauthorized creation, deletion, or modification access to critical data.
- CVE-2026-61126High
Vulnerability in Oracle Communications Billing and Revenue Management (component: Platform) versions 15.0.0.0.0-15.0.1.0.0 and 15.1.0.0.0-15.2.0.0.0. A low-privileged attacker with local access can fully compromise the system.
- CVE-2026-61091High
In Oracle Communications Billing and Revenue Management versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0, an easily exploitable vulnerability allows a low-privileged attacker with logon to the infrastructure to compromise the system. Successful attacks can result in takeover of the system.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

