VDB
OSA-38823357
OSA-38823357
PUBLISHED
CVSS 4.699999809265137 MEDIUM
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: Thick Client (Apache Log4j)). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebCenter Sites accessible data as well as unauthorized read access to a subset of Oracle WebCenter Sites accessible data. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).
Risk Scores
CVSS 3.1
4.699999809265137
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle | Primavera Unifier Version 24.12.0-24.12.13 | Primavera Unifier Version 24.12.0-24.12.13 |
| Oracle | Oracle Product Lifecycle Analytics Version 3.6.1 | Oracle Product Lifecycle Analytics Version 3.6.1 |
| Oracle | Oracle Retail Merchandise Financial Planning Version 16.0 | Oracle Retail Merchandise Financial Planning Version 16.0 |
| Oracle | Oracle Insurance Policy Administration J2EE Version 11.3.1.0 | Oracle Insurance Policy Administration J2EE Version 11.3.1.0 |
| Oracle | Oracle Utilities Application Framework Version 25.4 | Oracle Utilities Application Framework Version 25.4 |
| Oracle | Oracle Utilities Application Framework Version 25.10 | Oracle Utilities Application Framework Version 25.10 |
| Oracle | Oracle Retail EFTLink Version 21.0.0 - 25.0.0 | Oracle Retail EFTLink Version 21.0.0 - 25.0.0 |
| Oracle | Oracle Retail Integration Bus Version 19.0.1 | Oracle Retail Integration Bus Version 19.0.1 |
| Oracle | Oracle Retail Service Backbone Version 16.0.3 | Oracle Retail Service Backbone Version 16.0.3 |
| Oracle | Oracle Communications Order and Service Management Version 8.0.0 | Oracle Communications Order and Service Management Version 8.0.0 |
| Oracle | Oracle Data Integrator Version 12.2.1.4.0 | Oracle Data Integrator Version 12.2.1.4.0 |
| Oracle | Oracle Managed File Transfer Version 12.2.1.4.0 | Oracle Managed File Transfer Version 12.2.1.4.0 |
| Oracle | Oracle Identity Manager Version 14.1.2.1.0 | Oracle Identity Manager Version 14.1.2.1.0 |
| Oracle | Oracle Middleware Common Libraries and Tools Version 12.2.1.4.0 | Oracle Middleware Common Libraries and Tools Version 12.2.1.4.0 |
| Oracle | Oracle Retail Predictive Application Server Version 16.0.3 | Oracle Retail Predictive Application Server Version 16.0.3 |
| Oracle | Oracle Life Sciences Empirica Signal Version 9.2.1-9.2.3 | Oracle Life Sciences Empirica Signal Version 9.2.1-9.2.3 |
| Oracle | Oracle Financial Services Enterprise Case Management Version 8.1.2.10 | Oracle Financial Services Enterprise Case Management Version 8.1.2.10 |
| Oracle | Oracle Enterprise Manager Base Platform(Enterprise Manager Install) Version 24.1 | Oracle Enterprise Manager Base Platform(Enterprise Manager Install) Version 24.1 |
| Oracle | Oracle Enterprise Manager Base Platform(Enterprise Manager Install) Version 13.5 | Oracle Enterprise Manager Base Platform(Enterprise Manager Install) Version 13.5 |
| Oracle | Oracle Financial Services Enterprise Case Management Version 8.1.2.11 | Oracle Financial Services Enterprise Case Management Version 8.1.2.11 |
…and 79 more
Timeline
- Apr 24, 2026 CVE Published