Vulnerability in Oracle WebCenter Sites Affects Oracle Fusion Middleware

CVE-2024-20908

Summary

A vulnerability exists in Oracle WebCenter Sites, a component of Oracle Fusion Middleware, which permits an unauthenticated attacker with network access via HTTP to exploit the system. The vulnerability impacts version 12.2.1.4.0, enabling potential unauthorized updates, inserts, or deletions of data, along with unauthorized read access to certain data. Exploitation requires human interaction from individuals other than the attacker, leading to potentially significant effects on the wider Oracle ecosystem. Organizations are encouraged to evaluate their defenses against this vulnerability to mitigate risks related to data integrity and confidentiality.

References