Unauthenticated Access Vulnerability in Oracle E-Business Suite Marketing Component

CVE-2021-2359

Summary

This vulnerability within the Oracle Marketing component of Oracle E-Business Suite allows unauthenticated attackers with HTTP network access to compromise the system. Though the attack requires human interaction from a third party, it poses significant risks, enabling unauthorized access to sensitive data and the ability to perform unauthorized updates, insertions, or deletions within the accessible data of Oracle Marketing. The implications of exploiting this vulnerability extend beyond just the Oracle Marketing component, potentially affecting other products as well.

References