Oracle Communications Billing and Revenue Management

Name: Oracle Communications Billing and Revenue Management
Brand: Oracle

productNL

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

10critical4high0medium0low

updated 2026-10-28

vulnerabilities (29)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-48734US	—	2.02% (81st)	Exploit	no fix	2025-05-28	≤ vers:unknown/*
CVE-2026-64193US	—	1.44% (73rd)	—	no fix	2026-07-20	≤ vers:unknown/*
CVE-2026-63639US	—	1.17% (67th)	—	no fix	2026-08-18	≤ vers:unknown/*
CVE-2026-58389US	high7.5	1.03% (64th)	—	no fix	2026-07-27	≤ vers:unknown/*
CVE-2026-84939US	—	0.85% (58th)	—	no fix	2026-09-10	≤ vers:unknown/*
CVE-2026-61674US	—	0.72% (54th)	—	no fix	2026-09-21	≤ vers:unknown/*
CVE-2026-28369US	critical9.1	0.69% (53rd)	—	no fix	2026-03-27	≤ vers:unknown/*
CVE-2026-29167US	—	0.69% (53rd)	—	no fix	2026-06-08	≤ vers:unknown/*
CVE-2026-39892US	critical9.8	0.65% (51st)	—	no fix	2026-04-08	≤ vers:unknown/*
CVE-2026-10050US	critical9.1	0.63% (50th)	—	no fix	2026-08-04	≤ vers:unknown/*
CVE-2026-58016US	critical9.1	0.55% (46th)	—	no fix	2026-06-30	≤ vers:unknown/*
CVE-2026-5450US	—	0.50% (43rd)	—	no fix	2026-04-20	≤ vers:unknown/*
CVE-2026-101763US	critical9.8OT elevated	0.50% (43rd)	—	no fix	2026-10-20	≤ vers:unknown/*
CVE-2026-13221US	critical9.1	0.49% (42nd)	—	no fix	2026-07-13	≤ vers:unknown/*
CVE-2026-68525US	—OT elevated	0.49% (42nd)	—	no fix	2026-08-25	≤ vers:unknown/*
CVE-2026-86219US	—OT elevated	0.47% (40th)	—	no fix	2026-09-06	≤ vers:unknown/*
CVE-2026-32327US	—	0.46% (40th)	—	no fix	2026-08-06	≤ vers:unknown/*
CVE-2026-78030US	—	0.42% (37th)	—	no fix	2026-09-19	≤ vers:unknown/*
CVE-2026-101765US	critical9.1OT elevated	0.42% (36th)	—	no fix	2026-10-20	≤ vers:unknown/*
CVE-2026-75596US	high7.5	0.37% (31st)	—	no fix	2026-08-19	≤ vers:unknown/*
CVE-2026-101758US	high8.2	0.36% (29th)	—	no fix	2026-10-20	≤ vers:unknown/*
CVE-2026-6653US	critical9.8	0.36% (29th)	—	no fix	2026-06-22	≤ vers:unknown/*
CVE-2026-101791US	high8.1	0.33% (26th)	—	no fix	2026-10-20	≤ vers:unknown/*
CVE-2026-75595US	critical9.1	0.32% (24th)	—	no fix	2026-08-19	≤ vers:unknown/*
CVE-2026-56130US	—OT elevated	0.30% (23rd)	—	no fix	2026-06-25	≤ vers:unknown/*
CVE-2026-13321US	—	0.21% (11th)	—	no fix	2026-07-22	≤ vers:unknown/*
CVE-2026-54906US	critical9.8	0.16% (5th)	—	no fix	2026-06-24	≤ vers:unknown/*
CVE-2026-63388US	—	0.14% (3rd)	—	no fix	2026-08-20	≤ vers:unknown/*
CVE-2026-21716US	—OT elevated	0.14% (3rd)	—	no fix	2026-03-30	≤ vers:unknown/*

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-284Improper Access Control3 CVEs
CWE-287Improper Authentication3 CVEs
CWE-416Use After Free3 CVEs
CWE-787Out-of-bounds Write3 CVEs
CWE-294Authentication Bypass by Capture-replay2 CVEs
CWE-306Missing Authentication for Critical Function2 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-121Stack-based Buffer Overflow1 CVEs

sources (1)

Which sources assert this record, and when.

NLNCSC-NL (CSAF)29 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan