CVE-2023-21848

Vulnerability in the Oracle Communications Convergence product of Oracle Communications Applications component: Admin Configuration. The supported version that is affected is 3.0.3.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Orac...

CVE-2023-21848

...

CVE-2023-21848

...

CVE-2023-21848

Oracle Communications Convergence (Admin Configuration) vulnerable in version 3.0.3.1.0 due to insufficient input validation. A remote, low-privilege attacker with network access over HTTP can potentially take over the system. Public details in PT-2023-1195 confirm the issue and note that a fix i...