Vulnerability in Oracle E-Business Suite's Enterprise Command Center Framework

CVE-2023-22107

Summary

An unauthenticated access vulnerability exists in the Oracle Enterprise Command Center Framework found in Oracle E-Business Suite. This weakness allows attackers with network access via HTTP to exploit the framework, necessitating a specific human interaction from an individual other than the attacker for successful exploitation. While the vulnerability lies within the Oracle Enterprise Command Center Framework itself, it has the potential to affect other connected products significantly. Successful exploitation could lead to unauthorized data manipulation actions, including updates, inserts, and deletions, as well as unauthorized access to confidential information within the framework.

References