CVE-2021-2205

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration)

Critical · published April 22, 2021

CVSS v3.1
9.1
EPSS
1%
Percentile
71.2
In the wild
Unconfirmed
What it is

🚨 Unauthenticated access can bring chaos to your Oracle Marketing setup! An attacker just needs network access via HTTP to unleash a storm of unauthorized data manipulation! 🔥 This vulnerability is like leaving your shop's back door wide open while the lights are on — anyone can stroll in and play around with your inventory. Without a proper lock, all your precious data is up for grabs by anyone passing by! An attacker could create, delete, or modify critical data in your Oracle Marketing system, potentially compromising all accessible information. This means anyone could walk away with your sensitive data or tamper with it beyond recognition! The consequences could be absolutely devastating for your business operations!

Put simply

This vulnerability is like leaving your shop's back door wide open while the lights are on — anyone can stroll in and play around with your inventory. Without a proper lock, all your precious data is up for grabs by anyone passing by! This vulnerability in the Oracle Marketing component of the Oracle E-Business Suite allows unauthenticated attackers to exploit the system via an unprotected HTTP access. It poses high risks to both confidentiality and integrity of the data managed by the marketing administration.

What to do

An attacker could create, delete, or modify critical data in your Oracle Marketing system, potentially compromising all accessible information. This means anyone could walk away with your sensitive data or tamper with it beyond recognition! The consequences could be absolutely devastating for your business operations! Update your Oracle E-Business Suite to version 12.2.11 or higher to patch this vulnerability immediately. Additionally, consider restricting network access to ensure that only authenticated users can reach critical components of your system. 🛡️ You've got this! Follow these steps, and you’ll have your Oracle Marketing system secured in no time! 💪✨

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.01344 · 71.2th percentile
Published
2021-04-22T21:53Z
EPSS history
Timeline
  • 22 APR 21:53Z
    Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration)
    cvelistv5