CVE-2022-21402: Medium severity oracle communications operations monitor vulnerability

Published Jan 19, 2022

Updated

Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). Supported versions that are affected are 3.4, 4.2, 4.3, 4.4 and 5.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Communications Operations Monitor. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Communications Operations Monitor, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Communications Operations Monitor accessible data as well as unauthorized read access to a subset of Oracle Communications Operations Monitor accessible data. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N).

Affected Software

5 affected components

Oracle Communications Operations Monitor=3.4

Oracle Communications Operations Monitor=4.2

Oracle Communications Operations Monitor=4.3

Oracle Communications Operations Monitor=4.4

Oracle Communications Operations Monitor=5.0

Event History

Jan 19, 2022

CVE Published

via MITRE·11:26 AM

Data Sourced

via MITRE·11:26 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the Oracle Communications Operations Monitor vulnerability?

The Oracle Communications Operations Monitor vulnerability is a vulnerability in the Mediation Engine component of the product that allows a high privileged attacker with network access via HTTP to compromise the system.

Which versions of Oracle Communications Operations Monitor are affected by the vulnerability?

The vulnerability affects versions 3.4, 4.2, 4.3, 4.4, and 5.0 of Oracle Communications Operations Monitor.

How severe is the Oracle Communications Operations Monitor vulnerability?

The Oracle Communications Operations Monitor vulnerability has a severity rating of 4.8, which is considered medium.

How can the Oracle Communications Operations Monitor vulnerability be exploited?

The vulnerability can be easily exploited by a high privileged attacker with network access via HTTP.

Is there a fix for the Oracle Communications Operations Monitor vulnerability?

To fix the vulnerability, it is recommended to apply the necessary patches or updates provided by Oracle.