Unauthorized Access Vulnerability in Oracle Communications Operations Monitor

CVE-2022-21402

What is CVE-2022-21402?

The vulnerability in Oracle Communications Operations Monitor affects several versions of the product, allowing high privileged attackers with network access via HTTP to potentially compromise sensitive data. Exploitation requires human interaction from an innocent party, which poses a significant risk as successful attacks can lead to unauthorized updates, inserts, or deletions, as well as unauthorized read access to critical operational data. Therefore, while the vulnerability primarily resides in the Mediation Engine component, its impact can extend to other associated products.

References