Vulnerability in Oracle Communications Convergence by Oracle

CVE-2022-21338

What is CVE-2022-21338?

A vulnerability exists in Oracle Communications Convergence that allows an attacker with low privileges and network access via HTTP to exploit the system. This vulnerability requires human interaction for successful execution. Once exploited, it can lead to unauthorized updates, deletions, or inserts of data, as well as unauthorized read access to certain data within Oracle Communications Convergence. Users and organizations relying on this product should apply necessary security measures to protect sensitive data from potential unauthorized access.

References