Vulnerability in Oracle E-Business Suite's Quoting Component
CVE-2021-2268

8.1HIGH

Key Information:

Vendor
Oracle
Status
Quoting
Vendor
CVE Published:
22 April 2021

Summary

A vulnerability exists within the Oracle Quoting component of Oracle E-Business Suite, affecting versions 12.1.1 to 12.1.3. This flaw is easily exploitable by low-privileged attackers with network access via HTTP, allowing them to manipulate, create, or delete critical data. Successful exploits can lead to unauthorized access with the potential to compromise the confidentiality and integrity of all data related to Oracle Quoting systems.

Affected Version(s)

Quoting 12.1.1-12.1.3

References

https://www.oracle.com/security-alerts/cpuapr2021.html
x_refsource_MISC

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.