CVE-2026-91613

CVE-2026-91613

Low · published October 21, 2026

CVSS v3.1
3.3
EPSS
0%
Percentile
1.3
In the wild
Unconfirmed
What it is

Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security). Supported versions that are affected are 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0 and 8.0.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Communications Unified Inventory Management executes to compromise Oracle Communications Unified Inventory Management. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Communications Unified Inventory Management accessible data. CVSS 3.1 Base Score 3.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).

The record
Technical detail
CVSS v3.1
3.3 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00112 · 1.3th percentile
Published
2026-10-21T02:21Z
References (1)
EPSS history
Timeline
  • 22 OCT 03:36Z
    EPSS moved — → 0%
    epss
  • 20 OCT 21:26Z
    Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security)
    cvelistv5
  • 20 OCT 21:26Z
    Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security)
    cvelistv5