Exploitable Vulnerability in Oracle Enterprise Manager for Fusion Middleware

CVE-2021-2008

Summary

A vulnerability exists in the Enterprise Manager for Fusion Middleware that enables an unauthenticated attacker to potentially compromise the system through HTTP access. This flaw allows attackers to gain unauthorized read, update, insert, or delete access to sensitive data. The vulnerability also opens the door to causing a partial denial of service, affecting the performance and availability of the Enterprise Manager application. Affected versions include 11.1.1.9 and 12.2.1.3, highlighting the necessity for users to apply the relevant security updates.

References