Vulnerability in Oracle E-Business Suite's View Reports Component

CVE-2021-35582

Summary

A security vulnerability in the Oracle Applications Manager, part of the Oracle E-Business Suite, could allow low-privileged attackers with network access via HTTP to compromise the system. Although the vulnerability resides in the View Reports component, successful exploitation may lead to unauthorized updates, inserts, or deletions of accessible data within Oracle Applications Manager. Furthermore, it could also enable unauthorized read access to certain datasets and potentially trigger a partial denial of service. Exploitation requires human interaction from a third party, making awareness vital for mitigating risks associated with this flaw. For more detailed information, refer to the Oracle security alerts.

References