Vulnerability in Oracle Communications Operations Monitor Allows Unauthorized Access

CVE-2022-21397

Summary

A vulnerability exists in the Oracle Communications Operations Monitor product, specifically within the Mediation Engine component, which can be exploited by low-privileged attackers with network access through HTTP. This exploitation requires human interaction from another party, raising significant security concerns. Successful attacks may lead to unauthorized modifications to data, including updates, inserts, or deletions, and allow unauthorized read access to certain datasets within the Oracle Communications Operations Monitor. This vulnerability not only affects the monitor itself but can also have ripple effects on interconnected systems.

References