CVE-2023-21894: High severity oracle global lifecycle management nextgen oui framework vulnerability
Vulnerability in the Oracle Global Lifecycle Management NextGen OUI Framework product of Oracle Fusion Middleware (component: NextGen Installer issues). Supported versions that are affected are Prior to 13.9.4.2.11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Global Lifecycle Management NextGen OUI Framework executes to compromise Oracle Global Lifecycle Management NextGen OUI Framework. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Global Lifecycle Management NextGen OUI Framework. CVSS 3.1 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H).
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2023-21894.
What is the affected software?
The affected software is Oracle Global Lifecycle Management NextGen OUI Framework prior to version 13.9.4.2.11.
What is the severity of CVE-2023-21894?
The severity of CVE-2023-21894 is high with a severity value of 7.3.
How can the vulnerability be exploited?
The vulnerability allows a low privileged attacker with login access to the Oracle Global Lifecycle Management NextGen OUI Framework to easily exploit it.
How can I fix CVE-2023-21894?
To fix CVE-2023-21894, update the Oracle Global Lifecycle Management NextGen OUI Framework to version 13.9.4.2.11 or later.