A vulnerability classified as critical was found in Oracle Communications Order and Service Management 7.4.0/7.4.1/7.5.0. Affected by this vulnerability is an unknown functionality of the component Security. The manipulation leads to improper authentication.
This vulnerability is known as CVE-2025-21554. The attack can be launched remotely. There is no exploit available.
It is recommended to upgrade the affected component.