# Oracle Communications Billing and Revenue Management


- [CVE-2022-21431](https://insights.sbomify.com/CVE-2022-21431/): Auth bypass in Communications Billing and Revenue Management (critical 10.0)
- [CVE-2022-21275](https://insights.sbomify.com/CVE-2022-21275/): Auth bypass in Communications Billing and Revenue Management (critical 10.0)
- [CVE-2022-21389](https://insights.sbomify.com/CVE-2022-21389/): Auth bypass in Communications Billing and Revenue Management (critical 10.0)
- [CVE-2022-21390](https://insights.sbomify.com/CVE-2022-21390/): Auth bypass in Communications Billing and Revenue Management (critical 10.0)
- [CVE-2018-14721](https://insights.sbomify.com/CVE-2018-14721/): Server-Side Request Forgery (SSRF) in jackson-databind (critical 10.0)
- [CVE-2022-21276](https://insights.sbomify.com/CVE-2022-21276/): Auth bypass in Communications Billing and Revenue Management (critical 9.9)
- [CVE-2022-21391](https://insights.sbomify.com/CVE-2022-21391/): Auth bypass in Communications Billing and Revenue Management (critical 9.9)
- [CVE-2019-20330](https://insights.sbomify.com/CVE-2019-20330/): Deserialization of Untrusted Data in jackson-databind (critical 9.8)
- [CVE-2019-17531](https://insights.sbomify.com/CVE-2019-17531/): jackson-databind polymorphic typing issue (critical 9.8)
- [CVE-2019-16942](https://insights.sbomify.com/CVE-2019-16942/): Polymorphic Typing in FasterXML jackson-databind (critical 9.8)
- [CVE-2019-16943](https://insights.sbomify.com/CVE-2019-16943/): jackson-databind polymorphic typing issue (critical 9.8)
- [CVE-2018-14718](https://insights.sbomify.com/CVE-2018-14718/): Arbitrary Code Execution in jackson-databind (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/products/oracle/communications-billing-and-revenue-management/