CVE-2026-101793

Received Received - Intake

Oracle Communications BRM Elastic Charging Engine Privilege Escalation

Publication date: 2026-10-20

Last updated on: 2026-10-20

Assigner: Oracle

Description

Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Core). Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Communications BRM - Elastic Charging Engine executes to compromise Oracle Communications BRM - Elastic Charging Engine. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Communications BRM - Elastic Charging Engine accessible data. CVSS 3.1 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-20

Last Modified

2026-10-20

Generated

2026-10-21

AI Q&A

2026-10-21

EPSS Evaluated

N/A

NVD

CVE-2026-101793

Affected Vendors & Products

Vendor	Product	Version / Range
Oracle	Corporation	Oracle Communications BRM - Elastic Charging Engine 15.0.0.0.0
Oracle	Corporation	Oracle Communications BRM - Elastic Charging Engine 15.0.1.0.0
Oracle	Corporation	Oracle Communications BRM - Elastic Charging Engine 15.1.0.0.0
Oracle	Corporation	Oracle Communications BRM - Elastic Charging Engine 15.2.0.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle Communications BRM - Elastic Charging Engine where a low-privileged attacker with logon access can exploit it to gain unauthorized access to critical data or full access to all accessible data in the system. The vulnerability has a CVSS base score of 5.5, indicating a medium severity with confidentiality impacts.

Impact Analysis

If exploited, this vulnerability could allow an attacker to access sensitive data stored or processed by the Oracle Communications BRM - Elastic Charging Engine, potentially leading to data breaches or unauthorized disclosure of confidential information.

Compliance Impact

This vulnerability could lead to non-compliance with data protection regulations like GDPR or HIPAA by enabling unauthorized access to personal or sensitive data, potentially resulting in legal penalties or reputational damage.

Mitigation Strategies

Apply the latest security patches from Oracle for Oracle Communications BRM - Elastic Charging Engine versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 to address the vulnerability.

Hi! I’m here to help you understand CVE-2026-101793. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70