Vulnerability in Oracle WebCenter Sites Support Tools Product of Oracle
CVE-2022-21575

6MEDIUM

Key Information:

Vendor
Oracle
Status
Webcenter Sites
Vendor
CVE Published:
19 July 2022

Summary

The vulnerability in Oracle WebCenter Sites Support Tools allows attackers with high privileges to exploit HTTP access, compromising sensitive data and gaining unauthorized control over critical operations, including data manipulation and service interruptions. This includes unauthorized updates, inserts, or deletions, raising serious security concerns for users of affected versions.

Affected Version(s)

WebCenter Sites < 4.4.2

References

https://www.oracle.com/security-alerts/cpujul2022.html
x_refsource_MISC

CVSS V3.1

Score:
6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.