VDB
OSA-37680952
OSA-37680952
PUBLISHED
Vulnerability in the Oracle Application Testing Suite product of Oracle Enterprise Manager (component: Load Testing for Web Apps (json-smart)). The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Testing Suite. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Application Testing Suite. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle | Oracle Communications Cloud Native Core Policy Version 24.2.0-24.2.4 | Oracle Communications Cloud Native Core Policy Version 24.2.0-24.2.4 |
| Oracle | Oracle Application Testing Suite Version 13.3.0.1 | Oracle Application Testing Suite Version 13.3.0.1 |
| Oracle | Oracle Banking Digital Experience Version 21.1.0.0.0 | Oracle Banking Digital Experience Version 21.1.0.0.0 |
| Oracle | Primavera Gateway Version 21.12.0-21.12.15 | Primavera Gateway Version 21.12.0-21.12.15 |
| Oracle | Primavera Unifier Version 23.12.0-23.12.13 | Primavera Unifier Version 23.12.0-23.12.13 |
| Oracle | Primavera Unifier Version 21.12.0-21.12.17 | Primavera Unifier Version 21.12.0-21.12.17 |
| Oracle | Primavera Unifier Version 22.12.0-22.12.15 | Primavera Unifier Version 22.12.0-22.12.15 |
| Oracle | Oracle Communications Order and Service Management Version 7.5.0 | Oracle Communications Order and Service Management Version 7.5.0 |
| Oracle | Oracle Communications Unified Inventory Management Version 7.6.0 | Oracle Communications Unified Inventory Management Version 7.6.0 |
| Oracle | Oracle Communications Cloud Native Core Binding Support Function Version 24.2.0-24.2.2 | Oracle Communications Cloud Native Core Binding Support Function Version 24.2.0-24.2.2 |
| Oracle | Oracle Communications Unified Inventory Management Version 7.5.1 | Oracle Communications Unified Inventory Management Version 7.5.1 |
| Oracle | Oracle Banking APIs Version 21.1.0.0.0 | Oracle Banking APIs Version 21.1.0.0.0 |
| Oracle | Oracle Banking Digital Experience Version 22.1.0.0.0 | Oracle Banking Digital Experience Version 22.1.0.0.0 |
| Oracle | Oracle Communications Unified Inventory Management Version 7.7.0 | Oracle Communications Unified Inventory Management Version 7.7.0 |
| Oracle | Primavera Gateway Version 20.12.0-20.12.17 | Primavera Gateway Version 20.12.0-20.12.17 |
| Oracle | Oracle Communications Cloud Native Core Security Edge Protection Proxy Version 24.2.3 | Oracle Communications Cloud Native Core Security Edge Protection Proxy Version 24.2.3 |
| Oracle | Oracle Communications Cloud Native Core Service Communication Proxy Version 25.1.100 | Oracle Communications Cloud Native Core Service Communication Proxy Version 25.1.100 |
| Oracle | Oracle Banking APIs Version 22.2.0.0.0 | Oracle Banking APIs Version 22.2.0.0.0 |
| Oracle | Oracle Financial Services Analytical Applications Infrastructure Version 8.0.7.8 | Oracle Financial Services Analytical Applications Infrastructure Version 8.0.7.8 |
| Oracle | Oracle Banking APIs Version 22.1.0.0.0 | Oracle Banking APIs Version 22.1.0.0.0 |
…and 8 more
Timeline
- Apr 21, 2025 CVE Published