Data Vulnerability in Oracle Transportation Management by Oracle

CVE-2022-39420

What is CVE-2022-39420?

A vulnerability exists in the Oracle Transportation Management product, which may be exploited by an attacker with low privileges and network access via HTTP. This flaw allows unauthorized actions such as the update, insertion, or deletion of accessible data, as well as the ability to read certain data without authorization. The affected versions include 6.4.3 and 6.5.1, highlighting the need for immediate security measures to protect sensitive information within the supply chain management system.

References