VDB
OSA-37260085
OSA-37260085
PUBLISHED
CVSS 7.5 HIGH
Vulnerability in the Oracle Middleware Common Libraries and Tools product of Oracle Fusion Middleware (component: Third Party (Spring Framework)). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Middleware Common Libraries and Tools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Middleware Common Libraries and Tools accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle | Oracle Identity Manager Version 12.2.1.4.0 | Oracle Identity Manager Version 12.2.1.4.0 |
| Oracle | Oracle Communications Cloud Native Core Security Edge Protection Proxy Version 24.2.0 | Oracle Communications Cloud Native Core Security Edge Protection Proxy Version 24.2.0 |
| Oracle | Oracle Communications Cloud Native Core Binding Support Function Version 24.2.0 | Oracle Communications Cloud Native Core Binding Support Function Version 24.2.0 |
| Oracle | Oracle Communications Cloud Native Core Binding Support Function Version 24.2.1 | Oracle Communications Cloud Native Core Binding Support Function Version 24.2.1 |
| Oracle | Oracle Communications Cloud Native Core Unified Data Repository Version 24.2.3 | Oracle Communications Cloud Native Core Unified Data Repository Version 24.2.3 |
| Oracle | Oracle Communications Cloud Native Core Unified Data Repository Version 24.3.0 | Oracle Communications Cloud Native Core Unified Data Repository Version 24.3.0 |
| Oracle | Oracle Communications Cloud Native Core Security Edge Protection Proxy Version 24.2.2 | Oracle Communications Cloud Native Core Security Edge Protection Proxy Version 24.2.2 |
| Oracle | Oracle Communications Cloud Native Core Policy Version 24.2.0-24.2.2 | Oracle Communications Cloud Native Core Policy Version 24.2.0-24.2.2 |
| Oracle | Oracle Middleware Common Libraries and Tools Version 12.2.1.4.0 | Oracle Middleware Common Libraries and Tools Version 12.2.1.4.0 |
| Oracle | Oracle Communications Cloud Native Core Security Edge Protection Proxy Version 24.2.1 | Oracle Communications Cloud Native Core Security Edge Protection Proxy Version 24.2.1 |
Timeline
- Feb 11, 2025 CVE Published