oracle communications billing and revenue management elastic charging engine

Name: oracle communications billing and revenue management elastic charging engine
Brand: oracle

productUS

cpe:2.3:a:oracle:communications_billing_and_revenue_management_elastic_charging_engine:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

7critical19high3medium0low

updated 2026-10-23

vulnerabilities (31)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-39144US	high8.5OT critical	98.1% (100th)	KEV	no fix	2021-08-23	2 versions
CVE-2020-5398US	high7.5OT high	88.8% (100th)	Exploit	no fix	2020-01-17	2 versions
CVE-2021-21341US	high7.5	77.8% (100th)	Exploit	no fix	2021-03-23	= 12.0.0.3.0
CVE-2021-21345US	critical9.9	72.3% (99th)	Exploit	no fix	2021-03-23	= 12.0.0.3.0
CVE-2021-21349US	high8.6	46.8% (99th)	Exploit	no fix	2021-03-23	= 12.0.0.3.0
CVE-2021-39141US	high8.5	16.1% (97th)	Exploit	no fix	2021-08-23	2 versions
CVE-2021-29425US	medium4.8	10.5% (96th)	Exploit	no fix	2021-04-13	2 versions
CVE-2019-10219US	medium6.1	2.16% (82nd)	Exploit	no fix	2019-11-08	2 versions
CVE-2019-10173US	critical9.8	95.0% (100th)	—	no fix	2019-07-23	2 versions
CVE-2021-21351US	critical9.1	82.1% (100th)	—	no fix	2021-03-23	= 12.0.0.3.0
CVE-2021-21346US	critical9.8	76.4% (100th)	—	no fix	2021-03-23	= 12.0.0.3.0
CVE-2021-21344US	critical9.8	76.0% (100th)	—	no fix	2021-03-23	= 12.0.0.3.0
CVE-2021-21343US	high7.5	46.7% (99th)	—	no fix	2021-03-23	= 12.0.0.3.0
CVE-2019-10086US	high7.3	28.4% (98th)	—	no fix	2019-08-20	2 versions
CVE-2021-21350US	critical9.8	15.2% (97th)	—	no fix	2021-03-23	= 12.0.0.3.0
CVE-2021-21347US	critical9.8	14.3% (97th)	—	no fix	2021-03-23	= 12.0.0.3.0
CVE-2021-39146US	high8.5	14.3% (97th)	—	no fix	2021-08-23	2 versions
CVE-2021-21348US	high7.5	13.8% (97th)	—	no fix	2021-03-23	= 12.0.0.3.0
CVE-2021-39152US	high8.5	11.4% (96th)	—	no fix	2021-08-23	2 versions
CVE-2021-39140US	medium6.3	5.92% (93rd)	—	no fix	2021-08-23	2 versions
CVE-2021-39154US	high8.5	4.74% (92nd)	—	no fix	2021-08-23	2 versions
CVE-2021-39151US	high8.5	4.74% (92nd)	—	no fix	2021-08-23	2 versions
CVE-2021-39149US	high8.5	4.74% (92nd)	—	no fix	2021-08-23	2 versions
CVE-2021-39148US	high8.5	4.74% (92nd)	—	no fix	2021-08-23	2 versions
CVE-2021-39147US	high8.5	4.74% (92nd)	—	no fix	2021-08-23	2 versions
CVE-2021-39139US	high8.8	4.54% (92nd)	—	no fix	2021-08-23	2 versions
CVE-2021-39153US	high8.5	4.46% (91st)	—	no fix	2021-08-23	2 versions
CVE-2021-39145US	high8.5	4.06% (91st)	—	no fix	2021-08-23	2 versions
CVE-2021-39150US	high8.5	3.44% (89th)	—	no fix	2021-08-23	2 versions
CVE-2023-21824US	—	0.21% (11th)	—	no fix	2023-01-18	12.0.0.3.0 → 12.0.0.7.0
CVE-2026-61053US	—	0.16% (5th)	—	no fix	2026-07-21	4 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-502Deserialization of Untrusted Data26 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type15 CVEs
CWE-918Server-Side Request Forgery (SSRF)3 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')3 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-835Loop with Unreachable Exit Condition ('Infinite Loop')2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE31 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan