UI Infrastructure Vulnerability in Oracle Transportation Management by Oracle

CVE-2022-21591

What is CVE-2022-21591?

A vulnerability exists in the UI Infrastructure component of the Oracle Transportation Management product that allows an attacker with low privileges and network access via HTTP to execute unauthorized actions. This can lead to unauthorized updates, inserts, or deletions of accessible data, as well as potentially causing a partial denial of service. The vulnerability affects specific versions of the product, emphasizing the need for users to address this security risk promptly to protect their data integrity and availability.

References