Description
Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security). Supported versions that are affected are 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0 and 8.0.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Communications Unified Inventory Management executes to compromise Oracle Communications Unified Inventory Management. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Communications Unified Inventory Management accessible data. CVSS 3.1 Base Score 3.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
No advisories yet.
References
| Link | Providers |
|---|---|
| https://www.oracle.com/security-alerts/cpuoct2026.html |
|
History
Tue, 20 Oct 2026 21:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security). Supported versions that are affected are 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0 and 8.0.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Communications Unified Inventory Management executes to compromise Oracle Communications Unified Inventory Management. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Communications Unified Inventory Management accessible data. CVSS 3.1 Base Score 3.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N). | |
| First Time appeared |
Oracle
Oracle communications Unified Inventory Management |
|
| CPEs | cpe:2.3:a:oracle:communications_unified_inventory_management:7.5.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_unified_inventory_management:7.5.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_unified_inventory_management:7.6.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_unified_inventory_management:7.7.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_unified_inventory_management:7.8.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_unified_inventory_management:8.0.1:*:*:*:*:*:*:* |
|
| Vendors & Products |
Oracle
Oracle communications Unified Inventory Management |
|
| References |
| |
| Metrics |
cvssV3_1
|
Status: PUBLISHED
Assigner: oracle
Published:
Updated: 2026-10-20T21:26:39.747Z
Reserved: 2026-09-14T22:10:16.648Z
Link: CVE-2026-91614
No data.
No data.
No data.
OpenCVE Enrichment
No data.
Weaknesses
No weakness.