CVE-2025-21554

Summary

CVE-2025-21554 is a newly disclosed vulnerability affecting Oracle Communications Order and Service Management, specifically its Security component. Versions 7.4.0, 7.4.1, and 7.5.0 are known to be vulnerable. The issue allows unauthenticated attackers, with only network access via HTTP, to exploit this easily exploitable vulnerability, potentially leading to unauthorized read access to a confined subset of the product's accessible data. The Base Score, as per the Common Vulnerability Scoring System (CVSS), is 5.3, with a significant impact on confidentiality.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.