Lucene search

K
nvd[email protected]NVD:CVE-2023-22083
HistoryOct 17, 2023 - 10:15 p.m.

CVE-2023-22083

2023-10-1722:15:13
web.nvd.nist.gov
2
cve-2023-22083
oracle communications
web ui
unauthenticated attacker
https
unauthorized access
cvss 3.1

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

AI Score

3.3

Confidence

High

EPSS

0.001

Percentile

24.2%

Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications (component: Web UI). Supported versions that are affected are 9.0-9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Enterprise Session Border Controller. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Enterprise Session Border Controller accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).

Affected configurations

Nvd
Node
oracleenterprise_session_border_controllerRange9.09.2
VendorProductVersionCPE
oracleenterprise_session_border_controller*cpe:2.3:a:oracle:enterprise_session_border_controller:*:*:*:*:*:*:*:*

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

AI Score

3.3

Confidence

High

EPSS

0.001

Percentile

24.2%

Related for NVD:CVE-2023-22083