Remote Code Execution Vulnerability in Oracle Commerce Platform by Oracle

CVE-2022-21387

What is CVE-2022-21387?

A security flaw in the Oracle Commerce Platform's Dynamo Application Framework enables unauthenticated attackers with network access to exploit the system. This exploitation can lead to unauthorized read access to specific data within the platform, thereby putting sensitive information at risk. The flaw affects versions 11.3.0, 11.3.1, and 11.3.2 and highlights vulnerabilities in access controls that could be leveraged by malicious actors.

References