Unauthenticated Remote Code Execution in Oracle Enterprise Data Quality Dashboard

CVE-2022-21615

Summary

An easily exploitable vulnerability exists in the Dashboard component of Oracle Enterprise Data Quality, allowing unauthenticated network access via HTTP. This vulnerability necessitates human interaction from a third party to facilitate the attack. While primarily affecting Oracle Enterprise Data Quality, successful exploitation may extend its impact to other connected Oracle products, leading to unauthorized access to critical data. Attackers may gain complete control over all data accessible within the Oracle Enterprise Data Quality environment.

References