Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). Supported versions that are affected are 11.3.0, 11.3.1 and 11.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Platform. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Commerce Platform accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).
References
| Link | Resource |
|---|---|
| https://www.oracle.com/security-alerts/cpujan2022.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
25 Jan 2022, 03:10
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Oracle
Oracle commerce Platform |
|
| CWE | NVD-CWE-noinfo | |
| CPE | cpe:2.3:a:oracle:commerce_platform:11.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:commerce_platform:11.3.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:commerce_platform:11.3.1:*:*:*:*:*:*:* |
|
| References | (MISC) https://www.oracle.com/security-alerts/cpujan2022.html - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : 5.0
v3 : 5.3 |
19 Jan 2022, 12:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-01-19 12:15
Updated : 2023-12-10 14:09
NVD link : CVE-2022-21387
Mitre link : CVE-2022-21387
CVE.ORG link : CVE-2022-21387
JSON object : View
Products Affected
oracle
- commerce_platform
CWE