Oracle Communications UIM EUVD-2026-62085

Network access via HTTP to a UIM web interface is required. The CVSS vector (PR:N) confirms no authentication is needed, but AC:H indicates a specific environmental condition or timing constraint must be met - the exact precondition is not described in available data, but is likely a race condition, specific header manipulation, or state-dependent request sequence within the vulnerable third-party component. Exploitation is limited by: (1) the AC:H complexity gate requiring non-trivial attack conditions, (2) network reachability to the UIM HTTP endpoint - deployments behind strict internal network controls significantly reduce exposure, (3) the vulnerability affects specific versions only (7.5.0, 7.5.1, 7.6.0-7.8.0, 8.0.1). No special non-default configuration is stated as required. No user interaction is necessary once network access is established.

CVSS 3.1 scores this at 7.4 (High) with vector AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - network-exploitable, unauthenticated, but requiring High Attack Complexity. The AC:H rating meaningfully reduces real-world risk: exploitation likely depends on race conditions, specific configuration state, or precise timing, rather than a simple crafted request. No EPSS score was provided, and the vulnerability is absent from the CISA KEV catalog. No public POC has been identified. The dual High impact on Confidentiality and Integrity - covering complete data read and write access - makes successful exploitation severe in consequence. However, the AC:H gate makes this a conditional priority: organizations running exposed UIM web interfaces on networks accessible to untrusted parties should treat this as high urgency, while deployments with strict internal-only access may accept lower remediation priority pending testing. No conflicting signals between CVSS and description were identified.

An unauthenticated attacker with network-level HTTP access to a UIM instance crafts a specially constructed HTTP request that triggers the authentication bypass in the bundled third-party component. Due to AC:H, the attacker may need to satisfy a specific precondition such as a timing window, session state, or configuration artifact. Upon success, the attacker gains full read and write access to UIM inventory data - including network topology, service configurations, and subscriber records - without ever presenting credentials. No public POC was identified at time of analysis.