Unauthorized Access Vulnerability in Oracle Communications Operations Monitor

CVE-2022-21401

Summary

A vulnerability in Oracle Communications Operations Monitor exposes the product to potential unauthorized access, allowing an attacker with high privileges and network access to manipulate sensitive data. This includes the ability to unauthorized update, insert, or delete data, along with unauthorized reading of accessible data. Additionally, the vulnerability can lead to a partial denial of service, impacting the availability of the affected operations monitor. It highlights the importance of securing network connections and maintaining updated software versions to mitigate potential exploitation.

References