CVE-2026-101517: Oracle Utilities Network Management System 2.4.0.1.0 through 2.4.0.1.33, 2.5.0.1.0 through 2.5.0.1.18, 2.5.0.2.0…

Affected technology

Oracle Utilities Network Management System · 2.4.0.1.0 through 2.4.0.1.33, 2.5.0.1.0 through 2.5.0.1.18, 2.5.0.2.0 through 2.5.0.2.11, 2.6.0.1.0 through 2.6.0.1.12, 2.6.0.2.0 through 2.6.0.2.9, 25.12.0.0.0 through 25.12.0.0.2
Oracle Corporation

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Low privileged attacker with logon can the infrastructure where Oracle Utilities Network Management System executes to compromise Oracle Utilities Network Management System. Vendor/CNA’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality impact as high; integrity and availability impact as none.