Exploitable Vulnerability in Oracle Communications Operations Monitor Product

CVE-2022-21246

Summary

A security vulnerability exists in Oracle Communications Operations Monitor, specifically within the Mediation Engine component. This vulnerability can be exploited by a low-privileged attacker with network access via HTTP, enabling them to compromise sensitive data. Successful exploitation necessitates human interaction from a third party, making it a significant risk. The vulnerability can lead to unauthorized modifications in the database, allowing attackers to insert, update, or delete information. Additionally, unauthorized read access to certain data sets may also occur, further jeopardizing the integrity and confidentiality of the information within Oracle Communications Operations Monitor.

References