A vulnerability was found in Oracle Communications Order and Service Management 7.4.0/7.4.1/7.5.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Security. The manipulation leads to improper authorization.
This vulnerability is known as CVE-2025-21544. The attack can be launched remotely. There is no exploit available.
It is recommended to upgrade the affected component.