Vulnerability in Oracle Advanced Supply Chain Planning Product
CVE-2021-2253

9.1CRITICAL

Key Information:

Vendor
Oracle
Status
Advanced Supply Chain Planning
Vendor
CVE Published:
22 April 2021

Summary

This vulnerability in Oracle's Advanced Supply Chain Planning product allows an unauthenticated attacker to exploit the application over HTTP, resulting in unauthorized actions such as creating, deleting, or modifying critical data. The vulnerability affects versions 12.1 and 12.2, potentially giving attackers complete access to sensitive data managed by the application. Organizations are advised to implement necessary security measures to prevent exploitation.

Affected Version(s)

Advanced Supply Chain Planning 12.1

Advanced Supply Chain Planning 12.2

References

https://www.oracle.com/security-alerts/cpuapr2021.html
x_refsource_MISC

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.