Unauthenticated Access Vulnerability in Oracle HTTP Server by Oracle

CVE-2024-20991

What is CVE-2024-20991?

A significant vulnerability has been identified in Oracle HTTP Server, part of Oracle Fusion Middleware, specifically within the Web Listener component. This vulnerability allows an unauthenticated attacker, armed with basic network access via HTTP, to compromise the Oracle HTTP Server. Successful exploitation can lead to unauthorized read access to specific data that is available through the server, potentially exposing sensitive information. It is crucial for organizations using the affected version, 12.2.1.4.0, to assess their security posture and implement protective measures.

References