Exploitation Risk in Oracle Fusion Middleware - Outside In Technology

CVE-2023-22127

What is CVE-2023-22127?

The vulnerability affects the Oracle Outside In Technology component of Oracle Fusion Middleware, specifically in the Content Access SDK, Image Export SDK, PDF Export SDK, and HTML Export SDK. A low-privileged attacker with network access via HTTP can exploit this easily exploitable vulnerability. Successful exploitation can lead to unauthorized data modifications including updates, inserts, or deletions, as well as unauthorized read access to certain data subsets. Additionally, attackers can potentially cause a partial denial of service, impacting the availability of the Oracle Outside In Technology components.

References