Unauthenticated Remote Code Execution in Oracle Enterprise Data Quality by Oracle

CVE-2022-21613

What is CVE-2022-21613?

This vulnerability in Oracle Enterprise Data Quality allows an unauthenticated attacker to exploit the system through HTTP, necessitating human interaction from a third party. While primarily affecting Oracle Enterprise Data Quality, the consequences could extend to other connected applications. Attackers can gain unauthorized access to sensitive data, execute unintended updates, or delete information within the system. Furthermore, this vulnerability may lead to reduced service availability, jeopardizing the integrity and confidentiality of critical data assets.

References