Vulnerability in Oracle Web Applications Desktop Integrator Affects Oracle E-Business Suite

CVE-2023-21847

Summary

A vulnerability exists in Oracle Web Applications Desktop Integrator affecting the Oracle E-Business Suite, specifically allowing low privileged attackers with network access via HTTP to compromise the application. Exploitation requires human interaction from a user other than the attacker, and though the vulnerability is contained within the Web Applications Desktop Integrator, its ramifications can extend to other products. Successful attacks can lead to unauthorized updates, inserts, or deletions, as well as unauthorized read access to certain accessible data within the application.

References