Cyber Resilience

CVE-2023-22088

Oracle Communications Order And Service Management 7.4.0 … 7.4.1

Published
17 October 2023
Modified
21 November 2024
Patch / advisory
View advisory
CVSS Score v3.1 4.3
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS Score 0.0040 33th percentile
Risk Priority 37 floored blend · peak EPSS

Summary

CVE-2023-22088 is a medium-severity an unspecified weakness vulnerability in Oracle Communications Order And Service Management. Its CVSS base score is 4.3 (Medium).

Operationally, ranked at the 33th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

Vulnerability in the Oracle Communications Order and Service Management product of Oracle Communications Applications (component: User Management). Supported versions that are affected are 7.4.0 and 7.4.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…

more

Oracle Communications Order and Service Management. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Communications Order and Service Management accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).

CWE(s)
NVD-CWE-noinfo

Related Threats

CVEs Like This One

CVE-2025-21544Same product: Oracle Communications Order And Service Management
CVE-2025-30729Same product: Oracle Communications Order And Service Management
CVE-2025-21554Same product: Oracle Communications Order And Service Management
CVE-2025-21542Same product: Oracle Communications Order And Service Management
CVE-2026-46781Same vendor: Oracle
CVE-2026-60799Same vendor: Oracle
CVE-2024-21133Same vendor: Oracle
CVE-2026-21959Same vendor: Oracle
CVE-2023-22042Same vendor: Oracle
CVE-2026-35251Same vendor: Oracle

Affected Assets

oracle
communications order and service management
7.4.0, 7.4.1

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References