Vulnerability in Oracle Commerce Platform - Oracle

CVE-2022-21559

Summary

A vulnerability exists within the Oracle Commerce Platform's Dynamo Application Framework that can be exploited by an attacker with low privileges who has logged onto the infrastructure where the platform operates. This flaw enables the attacker to gain unauthorized access to critical information and potentially all data accessible through the Oracle Commerce Platform. Organizations utilizing affected versions 11.3.0, 11.3.1, or 11.3.2 should take immediate actions to mitigate the risks associated with this vulnerability.

References