CVE-2023-22093: Medium severity oracle e-business suite vulnerability
Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Requisition and Vacancy). Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iRecruitment. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle iRecruitment accessible data as well as unauthorized read access to a subset of Oracle iRecruitment accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2023-22093?
The severity of CVE-2023-22093 is medium, with a severity value of 6.5.
What is affected by CVE-2023-22093?
The Oracle iRecruitment product of Oracle E-Business Suite, specifically the Requisition and Vacancy component, is affected by CVE-2023-22093.
How can an attacker exploit CVE-2023-22093?
An unauthenticated attacker with network access via HTTP can exploit CVE-2023-22093 to compromise Oracle iRecruitment.
What versions of Oracle E-Business Suite are affected by CVE-2023-22093?
Versions 12.2.3 through 12.2.12 of Oracle E-Business Suite are affected by CVE-2023-22093.
Where can I find more information about CVE-2023-22093?
More information about CVE-2023-22093 can be found at the following URL: https://www.oracle.com/security-alerts/cpuoct2023.html.