Communications Billing And Revenue Management Elastic Charging Engine vulnerabilities

4 known vulnerabilities in Communications Billing And Revenue Management Elastic Charging Engine from Oracle. 4 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  Oracle Communications BRM - Elastic Charging…: Improper Access Control

  CVE-2026-101791Oct 20, 2026Oracle

  Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Security). The supported version that is affected is 15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network

• 9.8 Critical severity

  Oracle Communications BRM - Elastic Charging…: Improper Authentication

  CVE-2026-101763Oct 20, 2026Oracle

  Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Cloud native deployment). Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulne

• 7.8 High severity

  Oracle Communications BRM - Elastic Charging…: Improper Privilege Management

  CVE-2026-61053Jul 21, 2026Oracle

  Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Diameter Gateway and SDK). Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vuln

• 8.5 High severity

  XStream Remote Code Execution Exploited

  CVE-2021-39144Aug 23, 2021X-streamEPSS 98.1%

  XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user is affect