Vulnerability in Oracle E-Business Suite Work Provider Administration
CVE-2021-2246

8.1HIGH

Key Information:

Vendor
Oracle
Status
Universal Work Queue
Vendor
CVE Published:
22 April 2021

Summary

A vulnerability exists in the Oracle Universal Work Queue component of the Oracle E-Business Suite, specifically affecting versions 12.1.1 to 12.1.3. This issue can be exploited by a low-privileged attacker with network access via HTTP, leading to serious security risks such as unauthorized creation, deletion, or modification of data. Successful exploitation can enable attackers to gain access to all data available within the Oracle Universal Work Queue, compromising the integrity and confidentiality of sensitive information.

Affected Version(s)

Universal Work Queue 12.1.1-12.1.3

References

https://www.oracle.com/security-alerts/cpuapr2021.html
x_refsource_MISC

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.