CVE-2021-35582
First published: Wed Oct 20 2021(Updated: )
Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: View Reports). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications Manager. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Applications Manager, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Applications Manager accessible data as well as unauthorized read access to a subset of Oracle Applications Manager accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Applications Manager. CVSS 3.1 Base Score 6.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L).
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Applications Manager | >=12.2.3<=12.2.10 | |
| Oracle Applications Manager | =12.1.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2021-35582?
CVE-2021-35582 has been classified as a high severity vulnerability due to its potential for exploitation by low privileged attackers.
How do I fix CVE-2021-35582?
To fix CVE-2021-35582, it is recommended to apply the latest Oracle Security updates for the affected versions of Oracle Applications Manager.
What versions are affected by CVE-2021-35582?
CVE-2021-35582 affects Oracle Applications Manager versions 12.1.3 and 12.2.3 through 12.2.10.
Can CVE-2021-35582 be exploited remotely?
Yes, CVE-2021-35582 can be exploited remotely via HTTP by an attacker with low privileges.
What component is specifically affected by CVE-2021-35582?
The specific component affected by CVE-2021-35582 is the View Reports feature in Oracle Applications Manager.
- collector/nvd-index
- agent/softwarecombine
- agent/type
- agent/references
- agent/severity
- agent/author
- agent/remedy
- agent/tags
- agent/description
- agent/event
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- vendor/oracle
- canonical/oracle applications manager
- version/oracle applications manager/12.2.3
- version/oracle applications manager/12.2.10
- version/oracle applications manager/12.1.3