Unauthenticated Access Vulnerability in Oracle Enterprise Data Quality

CVE-2022-21614

Summary

This vulnerability allows an unauthenticated attacker to gain unauthorized access to sensitive data from the Oracle Enterprise Data Quality product via HTTP. The fault lies in the Dashboard component of Oracle Fusion Middleware, which can be exploited easily by attackers with network access. Successful exploitation may lead to significant data breaches, enabling unauthorized users to compromise the confidentiality of critical data, posing serious risks to organizations that rely on this solution.

References