Vulnerability in the Oracle Collaborative Planning product of Oracle E-Business Suite (component: Installation). Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Collaborative Planning. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Collaborative Planning accessible data. CVSS 3.1 Base Score 7.5 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).
References
Link | Resource |
---|---|
https://www.oracle.com/security-alerts/cpujan2023.html | Patch Vendor Advisory |
https://www.oracle.com/security-alerts/cpujan2023.html | Patch Vendor Advisory |
Configurations
History
21 Nov 2024, 07:43
Type | Values Removed | Values Added |
---|---|---|
References | () https://www.oracle.com/security-alerts/cpujan2023.html - Patch, Vendor Advisory |
Information
Published : 2023-01-18 00:15
Updated : 2024-11-21 07:43
NVD link : CVE-2023-21858
Mitre link : CVE-2023-21858
CVE.ORG link : CVE-2023-21858
JSON object : View
Products Affected
oracle
- collaborative_planning
CWE