Oracle E-Business Suite Attachments Vulnerability in Oracle Applications Framework

CVE-2022-21477

Summary

A vulnerability exists within the Oracle Applications Framework of Oracle E-Business Suite, specifically affecting file upload functionalities. This flaw enables low-privileged attackers with network access to exploit the system, requiring human interaction from a third party for successful exploitation. The impact of successful exploitation can lead to unauthorized data manipulation, such as updates, inserts, or deletions, as well as unauthorized read access to sensitive data. As this vulnerability affects the underlying framework, it poses risks to other interconnected products, potentially broadening the scope of its impact.

References