Known vulnerabilities in Oracle Communications BRM - Elastic Charging Engine

Vendor: Oracle
Software: Oracle Communications BRM - Elastic Charging Engine
Software CPE: cpe:2.3:a:oracle:oracle_communications_brm_-_elastic_charging_engine:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 38
Public exploits: 10
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Communications BRM - Elastic Charging Engine Oracle Communications BRM - Elastic Charging Engine is affected by 38 known vulnerabilities: 9 high, 20 medium, 9 low Critical High Medium Low

Vulnerabilities (38)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121007 - Exposure of sensitive information to an unauthorized actor
CVE-2025-66566		 CWE-200 Medium
No
No
 - 07.01.2026 -
#VU120231 - Improper Validation of Certificate with Host Mismatch
CVE-2025-68161		 CWE-297 Medium
No
No
 - 22.12.2025 -
#VU115573 - Protection Mechanism Failure
CVE-2025-41249		 CWE-693 Medium
No
No
 - 16.09.2025 -
#VU111165 - Improper Access Control
CVE-2025-48734		 CWE-284 Medium
No
No
 12.0.0.8.0 16.06.2025 SB2025061643
SB2025061644
SB2025061645
and 141 more
#VU103769 - Resource exhaustion
CVE-2025-25193		 CWE-400 Low
No
No
 - 11.02.2025 -
#VU93102 - Improper input validation
CVE-2024-6162		 CWE-20 Medium
No
No
 12.0.0.8.0 24.06.2024 SB2024062415
SB2024071878
SB2024071881
and 6 more
#VU89801 - Server-Side Request Forgery (SSRF)
CVE-2024-22262		 CWE-918 Medium
No
No
 12.0.0.8.0 24.05.2024 SB2024052420
SB2024052423
SB2024052708
and 76 more
#VU87744 - Out-of-bounds write
CVE-2024-29133		 CWE-787 High
No
No
 12.0.0.8.0 22.03.2024 SB2024032169
SB2024032283
SB20240417122
and 40 more
#VU83582 - Improper input validation
CVE-2023-34053		 CWE-20 Medium
No
No
 12.0.0.8.0 29.11.2023 SB2023112966
SB2023112967
SB2024011661
and 13 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 12.0.0.8.0 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 648 more
#VU75409 - Improper input validation
CVE-2023-20863		 CWE-20 Medium
No
No
 - 21.04.2023 -
#VU72123 - Deserialization of Untrusted Data
CVE-2023-25194		 CWE-502 Low
Available
No
 - 11.02.2023 -
#VU70531 - Deserialization of Untrusted Data
CVE-2022-36944		 CWE-502 High
Available
No
 12.0.0.7.0 28.12.2022 SB2022122829
SB2022122924
SB2023021531
and 15 more
#VU70527 - Improper input validation
CVE-2022-41966		 CWE-20 Medium
Available
No
 12.0.0.7.0 28.12.2022 SB2022122822
SB2023011211
SB2023020616
and 53 more
#VU70385 - Deserialization of Untrusted Data
CVE-2022-1471		 CWE-502 High
Available
No
 - 15.12.2022 -
#VU70118 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-41881		 CWE-835 Medium
No
No
 - 12.12.2022 -
#VU64957 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-33980		 CWE-94 High
Available
No
 - 06.07.2022 -
#VU63085 - Improper input validation
CVE-2022-22971		 CWE-20 Medium
Available
No
 - 12.05.2022 -
#VU61810 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-43797		 CWE-444 Medium
No
No
 - 02.04.2022 -
#VU50139 - Incorrect Default Permissions
CVE-2020-8908		 CWE-276 Low
No
No
 - 11.12.2020 -


Showing elements 1 - 20 out of 38