Unauthorized Access Vulnerability in Oracle Communications Operations Monitor
CVE-2022-21402
Key Information:
- Vendor
Oracle
- Vendor
- CVE Published:
- 19 January 2022
What is CVE-2022-21402?
The vulnerability in Oracle Communications Operations Monitor affects several versions of the product, allowing high privileged attackers with network access via HTTP to potentially compromise sensitive data. Exploitation requires human interaction from an innocent party, which poses a significant risk as successful attacks can lead to unauthorized updates, inserts, or deletions, as well as unauthorized read access to critical operational data. Therefore, while the vulnerability primarily resides in the Mediation Engine component, its impact can extend to other associated products.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Communications Operations Monitor 3.4
Communications Operations Monitor 4.2
Communications Operations Monitor 4.3
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved