Vulnerability in Oracle Fusion Middleware Affecting Outside In Technology

CVE-2024-20930

Summary

A vulnerability exists within the Oracle Fusion Middleware's Outside In Technology, specifically impacting the Content Access SDK, Image Export SDK, PDF Export SDK, and HTML Export SDK in version 8.5.6. This flaw is easily exploitable by low-privileged attackers who have network access via HTTP, allowing them to compromise essential functionalities of Oracle Outside In Technology. Successful exploitation may lead to unauthorized updates, inserts, or deletions of accessible data, as well as unauthorized read access to certain datasets. Furthermore, the vulnerability offers an avenue for attackers to potentially induce a partial denial of service, impacting the availability of the affected systems. Organizations using this version of Oracle Outside In Technology are encouraged to apply security patches and updates to mitigate these risks.

References