Unauthorized Access Vulnerability in Oracle E-Business Suite's iSupport

CVE-2021-2097

Summary

The vulnerability in Oracle iSupport, part of the Oracle E-Business Suite, allows attackers to gain unauthorized access to sensitive information. Attackers can exploit the flaw remotely via HTTP, potentially with only user interaction required, which raises significant security concerns for organizations utilizing affected versions. Successful exploitation could enable attackers to access confidential data, along with the ability to update, insert, or delete critical information within the system. Given the reach of this vulnerability, it poses a substantial risk not only to the iSupport functionality but also to the integrity of broader systems relying on this product.

References