Authentication Engine Vulnerability in Oracle Fusion Middleware

CVE-2023-21859

What is CVE-2023-21859?

An easily exploitable vulnerability in the Authentication Engine of Oracle Access Manager within the Oracle Fusion Middleware suite allows attackers with privileged access to compromise the service. Attackers who successfully exploit this vulnerability can gain unauthorized access to sensitive data or full control over all data accessible via Oracle Access Manager. This risk highlights the critical need for organizations using the affected version to implement necessary security measures.

References