Oracle Communications Cloud Native Core Security Edge Protection Proxy vulnerabilities

Vulnerability in Oracle Communications Cloud Native Core Security Edge Protection Proxy (component: SEPP) affects versions 26.1.200 and 25.2.201. A low privileged attacker with network access via HTTP can gain unauthorized update, insert, delete, and read access to some data.

Vulnerability in Oracle Communications Cloud Native Core Security Edge Protection Proxy, component SEPP, affecting versions 26.1.200 and 25.2.201. A low-privileged authenticated attacker with HTTP network access can access data and create, delete, or modify data; the vulnerability is difficult to exploit but may impact other products. CVSS 3.1 Base Score 8.2.

Vulnerability in Oracle Communications Cloud Native Core Security Edge Protection Proxy, component SEPP, affecting versions 26.1.200 and 25.2.201. An unauthenticated attacker with access to the communication segment can access critical data and update, insert, or delete data. CVSS 3.1 Base Score 7.1.