Live › vulnerability › CVE-2026-101790
Go to dashboardOracle Communications BRM Elastic Charging Engine versions 15.0.0.0.0 through 15.2.0.0.0 contain a flaw in the Security component. A low-privileged user with logon to the host can read a subset of the product's data.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Operators running Oracle Communications BRM Elastic Charging Engine in the affected 15.x releases. The attacker must already have logon on the infrastructure where the product runs, so exposure depends on who holds accounts on those hosts. Teams not running this Oracle product can skip it.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Security). Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Communications BRM - Elastic Charging Engine executes to compromise Oracle Communications BRM - Elastic Charging Engine. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Communications BRM - Elastic Charging Engine accessible data. CVSS 3.1 Base Score 3.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).
This page as .md · .json · in your agent: get_signal("CVE-2026-101790")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.