The vulnerability involves the components of REST WebServices of the Oracle Identity Manager software platform from Oracle Fusion Middleware, as well as the WebServices Security component of the Oracle WebServices Manager application. This vulnerability allows a malicious individual to gain unauthorized access to the system.

The vulnerability of the REST WebService component of the Oracle Identity Manager identity management software and the WebServices Security component of the Oracle WebServices Manager application is related to the lack of authentication for critical functions. Exploiting this vulnerability could...

CVE-2022-21390

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications component: Webservices Manager. Supported versions that are affected are 12.0.0.3 and 12.0.0.4. Easily exploitable vulnerability allows unauthenticated attacker with network...

Buffer overflow

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications component: Webservices Manager. Supported versions that are affected are 12.0.0.3 and 12.0.0.4. Easily exploitable vulnerability allows unauthenticated attacker with network...

CVE-2022-21390: Undefined Security Weakness

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications component: Webservices Manager. Supported versions that are affected are 12.0.0.3 and 12.0.0.4. Easily exploitable vulnerability allows unauthenticated attacker with network...