Oracle E-Business Suite Vulnerability in Concurrent Processing
CVE-2021-2295

8.1HIGH

Key Information:

Vendor

Oracle
Status
Concurrent Processing
Vendor
CVE Published:
22 April 2021

What is CVE-2021-2295?

This vulnerability within the Oracle E-Business Suite affects the Concurrent Processing component, specifically in BI Publisher Integration. Low-privileged attackers with network access via HTTP can exploit this vulnerability to gain unauthorized actions, which may result in the creation, deletion, or modification of critical data. Attackers can compromise sensitive information accessible through the Oracle Concurrent Processing feature, potentially leading to severe data breaches and integrity issues.

Affected Version(s)

Concurrent Processing 12.1.3

Concurrent Processing 12.2.3-12.2.10

References

https://www.oracle.com/security-alerts/cpuapr2021.html
x_refsource_MISC

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.