CVE-2023-21894
First published: Tue Jan 17 2023(Updated: )
Vulnerability in the Oracle Global Lifecycle Management NextGen OUI Framework product of Oracle Fusion Middleware (component: NextGen Installer issues). Supported versions that are affected are Prior to 13.9.4.2.11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Global Lifecycle Management NextGen OUI Framework executes to compromise Oracle Global Lifecycle Management NextGen OUI Framework. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Global Lifecycle Management NextGen OUI Framework. CVSS 3.1 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H).
Credit: secalert_us@oracle.com secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Global Lifecycle Management NextGen OUI Framework | <13.9.4.2.11 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2023-21894.
What is the affected software?
The affected software is Oracle Global Lifecycle Management NextGen OUI Framework prior to version 13.9.4.2.11.
What is the severity of CVE-2023-21894?
The severity of CVE-2023-21894 is high with a severity value of 7.3.
How can the vulnerability be exploited?
The vulnerability allows a low privileged attacker with login access to the Oracle Global Lifecycle Management NextGen OUI Framework to easily exploit it.
How can I fix CVE-2023-21894?
To fix CVE-2023-21894, update the Oracle Global Lifecycle Management NextGen OUI Framework to version 13.9.4.2.11 or later.
- agent/type
- agent/softwarecombine
- agent/severity
- agent/references
- agent/remedy
- agent/description
- agent/first-publish-date
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/author
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/oracle
- canonical/oracle global lifecycle management nextgen oui framework