Vulnerability in Oracle Reports Developer of Oracle Fusion Middleware

CVE-2024-21133

Summary

A vulnerability exists in Oracle Reports Developer, part of the Oracle Fusion Middleware suite, which allows unauthenticated attackers with network access to potentially exploit the system via HTTP. Successful exploitation requires human interaction from a user other than the attacker, which broadens the scope of impact. This vulnerability may allow unauthorized modifications (updates, inserts, or deletions), as well as unauthorized access to certain data subsets available to Oracle Reports Developer. Given its nature, organizations utilizing this component should take proactive measures to mitigate potential risks associated with unauthorized data manipulation and access.

References