Vulnerability in Oracle Communications Operations Monitor Mediation Engine
CVE-2022-21395

7.2HIGH

Key Information:

Vendor
Oracle
Status
Communications Operations Monitor
Vendor
CVE Published:
19 January 2022

Summary

A vulnerability exists in the Oracle Communications Operations Monitor's Mediation Engine that could be exploited by a high privileged attacker with network access via HTTP. This weakness allows unauthorized access to compromise the entire system, risking the integrity, confidentiality, and availability of sensitive data. If successfully executed, an attacker could take control of the Mediation Engine, posing serious threats to organizational security and operational continuity.

Affected Version(s)

Communications Operations Monitor 3.4

Communications Operations Monitor 4.2

Communications Operations Monitor 4.3

References

https://www.oracle.com/security-alerts/cpujan2022.html
x_refsource_MISC

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.