CVE-2025-30729

Summary

CVE-2025-30729 is a vulnerability affecting Oracle Communications Order and Service Management, specifically versions 7.4.0, 7.4.1, and 7.5.0 (Oracle Communications Applications component: Security). This issue is easily exploitable and allows a low-privileged attacker with network access via HTTP to compromise the system. Successful attacks necessitate human interaction, leading to unauthorized access and manipulation of some data (update, insert, delete), unauthorized read access to a subset of data, and a partial denial of service. The base score of this vulnerability, according to CVSS 3.1, is 5.5, with impacts on Confidentiality, Integrity, and Availability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.