Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-02353
HistoryOct 20, 2021 - 12:00 a.m.

Oracle E-Business Suite Unauthorized Access Vulnerability (CNVD-2022-02353)

2021-10-2000:00:00
China National Vulnerability Database
www.cnvd.org.cn
10
oracle e-business suite
unauthorized access
vulnerability
cnvd-2022-02353
extension
erp
hr
crm
html console
oracle applications manager
reports
attack
exploit
insert
delete
data

EPSS

0.001

Percentile

35.9%

Oracle E-Business Suite is an extension of the original Application (ERP) and includes a collection of ERP (Enterprise Resource Planning Management), HR (Human Resource Management), CRM (Customer Relationship Management) and other applications that are seamlessly integrated into one management suite. Manager (OAM) allows administrators to manage Oracle E-Business Suite systems from the HTML console. Reports component in Oracle Applications Manager in releases 12.1.3, 12.2.3-12.2.10 is vulnerable. An attacker could exploit the vulnerability to cause unauthorized update, insert, or delete access to certain Oracle Applications Manager-accessible data.

EPSS

0.001

Percentile

35.9%