CVE-2021-35554: Medium severity oracle trade management vulnerability
Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Quotes). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trade Management. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Trade Management accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2021-35554.
What is the title of the vulnerability?
The title of the vulnerability is 'Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Quotes).'
What is the affected software?
The affected software is Oracle Trade Management.
What are the supported versions affected by this vulnerability?
The supported versions affected by this vulnerability are 12.1.1-12.1.3 and 12.2.3-12.2.10.
What is the severity of CVE-2021-35554?
The severity of CVE-2021-35554 is medium with a severity value of 5.3.
How can an attacker exploit this vulnerability?
An unauthenticated attacker with network access via HTTP can exploit this vulnerability.
How can I fix CVE-2021-35554?
To fix CVE-2021-35554, it is recommended to apply the patches provided by Oracle.
Where can I find more information about CVE-2021-35554?
You can find more information about CVE-2021-35554 on the Oracle Security Alerts page.