VDB
OSA-2022-24823-oct2022
OSA-2022-24823-oct2022
PUBLISHED
CVSS 5.5 MEDIUM
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework (Netty)). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle WebCenter Portal executes to compromise Oracle WebCenter Portal. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Portal accessible data. CVSS 3.1 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).
Risk Scores
CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle | Oracle Financial Services Model Management and Governance Version 8.0.8.0 | Oracle Financial Services Model Management and Governance Version 8.0.8.0 |
| Oracle | Oracle Coherence Version 12.2.1.4.0 | Oracle Coherence Version 12.2.1.4.0 |
| Oracle | Oracle WebCenter Portal Version 12.2.1.4.0 | Oracle WebCenter Portal Version 12.2.1.4.0 |
| Oracle | Oracle Utilities Testing Accelerator Version 6.0.0.2.4 | Oracle Utilities Testing Accelerator Version 6.0.0.2.4 |
| Oracle | Oracle Utilities Testing Accelerator Version 6.0.0.1.3 | Oracle Utilities Testing Accelerator Version 6.0.0.1.3 |
| Oracle | Oracle Financial Services Model Management and Governance Version 8.1.0.0 | Oracle Financial Services Model Management and Governance Version 8.1.0.0 |
| Oracle | PeopleSoft Enterprise PeopleTools Version 8.59 | PeopleSoft Enterprise PeopleTools Version 8.59 |
| Oracle | Oracle Communications Pricing Design Center Version 12.0.0.4.0-12.0.0.6.0 | Oracle Communications Pricing Design Center Version 12.0.0.4.0-12.0.0.6.0 |
| Oracle | Oracle Financial Services Model Management and Governance Version 8.1.1.0 | Oracle Financial Services Model Management and Governance Version 8.1.1.0 |
| Oracle | PeopleSoft Enterprise PeopleTools Version 8.58 | PeopleSoft Enterprise PeopleTools Version 8.58 |
| Oracle | Oracle Communications Design Studio Version 7.4.2 | Oracle Communications Design Studio Version 7.4.2 |
| Oracle | Oracle Coherence Version 14.1.1.0.0 | Oracle Coherence Version 14.1.1.0.0 |
| Oracle | PeopleSoft Enterprise PeopleTools Version 8.60 | PeopleSoft Enterprise PeopleTools Version 8.60 |
| Oracle | Oracle Utilities Testing Accelerator Version 6.0.0.3.3 | Oracle Utilities Testing Accelerator Version 6.0.0.3.3 |
| Oracle | Oracle WebCenter Portal Version 12.2.1.3.0 | Oracle WebCenter Portal Version 12.2.1.3.0 |
Timeline
- Dec 12, 2022 CVE Published