VDB
OSA-2021-40690-oct2022
OSA-2021-40690-oct2022
PUBLISHED
CVSS 7.5 HIGH
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework (Apache Santuario XML Security For Java)). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Portal accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle | Oracle Solaris Cluster Version 4 | Oracle Solaris Cluster Version 4 |
| Oracle | BI Publisher Version 6.4.0.0.0 | BI Publisher Version 6.4.0.0.0 |
| Oracle | Oracle Financial Services Model Management and Governance Version 8.1.1.0 | Oracle Financial Services Model Management and Governance Version 8.1.1.0 |
| Oracle | Oracle Communications Services Gatekeeper Version 7.0.0.0.0 | Oracle Communications Services Gatekeeper Version 7.0.0.0.0 |
| Oracle | Oracle WebCenter Portal Version 12.2.1.3.0 | Oracle WebCenter Portal Version 12.2.1.3.0 |
| Oracle | BI Publisher Version 5.9.0.0 | BI Publisher Version 5.9.0.0 |
| Oracle | Oracle WebCenter Portal Version 12.2.1.4.0 | Oracle WebCenter Portal Version 12.2.1.4.0 |
Timeline
- Dec 12, 2022 CVE Published