CVE-2023-21997

Vulnerability in the Oracle User Management product of Oracle E-Business Suite component: Proxy User Delegation. Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle User...

CVE-2023-21997

...

CVE-2023-21997

...

CVE-2023-21997

The CVE-2023-21997 entry concerns Oracle E-Business Suite, specifically the Oracle User Management component’s Proxy User Delegation. Affected versions are 12.2.3–12.2.12. The vulnerability is described as allowing a low-privilege, unauthenticated or HTTP-network-access attacker to read a subset ...