Telecommunications Billing Integrator
Monthly
Unauthorized data manipulation in Oracle Telecommunications Billing Integrator versions 12.2.3 through 12.2.15 allows unauthenticated network attackers to compromise critical data integrity via crafted HTTP requests, requiring only victim interaction to trigger. The CVSS scope change (S:C) indicates successful exploitation can cascade into other Oracle E-Business Suite components beyond the directly targeted module, amplifying the overall impact. No public exploit code or CISA KEV listing has been identified at time of analysis; Oracle disclosed this vulnerability through its August 2026 Critical Patch Update.
Data compromise in Oracle Telecommunications Billing Integrator (Internal Operations component of Oracle E-Business Suite, versions 12.2.3 through 12.2.15) lets a low-privileged attacker with HTTP network access read and modify all data accessible to the application. Rated CVSS 3.1 8.1 for high confidentiality and integrity impact with no availability effect, and disclosed in Oracle's July 2026 Critical Patch Update. No public exploit is identified at time of analysis and it is not listed in CISA KEV.
Unauthorized data manipulation in Oracle Telecommunications Billing Integrator versions 12.2.3 through 12.2.15 allows unauthenticated network attackers to compromise critical data integrity via crafted HTTP requests, requiring only victim interaction to trigger. The CVSS scope change (S:C) indicates successful exploitation can cascade into other Oracle E-Business Suite components beyond the directly targeted module, amplifying the overall impact. No public exploit code or CISA KEV listing has been identified at time of analysis; Oracle disclosed this vulnerability through its August 2026 Critical Patch Update.
Data compromise in Oracle Telecommunications Billing Integrator (Internal Operations component of Oracle E-Business Suite, versions 12.2.3 through 12.2.15) lets a low-privileged attacker with HTTP network access read and modify all data accessible to the application. Rated CVSS 3.1 8.1 for high confidentiality and integrity impact with no availability effect, and disclosed in Oracle's July 2026 Critical Patch Update. No public exploit is identified at time of analysis and it is not listed in CISA KEV.