High · published October 12, 2025
CVSS calls it high at 7.5. It is confirmed in active exploitation. It sits in the 99.9th percentile for exploit probability.
🚨 An unauthenticated HTTP request is all it takes to exploit this Oracle Configurator vulnerability! 🔥 Think of Oracle Configurator as a high-security vault, but the lock is so easy to pick that anyone with a network connection can waltz right in—no key required! 😱 An attacker could gain unauthorized access to critical data, potentially seeing everything the configurator holds. Imagine a burglar not only entering your home but rifling through your most private documents—absolutely devastating for any organization!
Think of Oracle Configurator as a high-security vault, but the lock is so easy to pick that anyone with a network connection can waltz right in—no key required! 😱 This vulnerability allows unauthenticated attackers with network access to compromise Oracle Configurator, exposing sensitive data without needing any prior authentication. It's like leaving the door wide open in a high-stakes data environment.
An attacker could gain unauthorized access to critical data, potentially seeing everything the configurator holds. Imagine a burglar not only entering your home but rifling through your most private documents—absolutely devastating for any organization! Update Oracle E-Business Suite to versions 12.2.15 or higher immediately. Ensure proper firewall rules are in place and review access controls to this product. Don't wait—this is crucial! You've got this! Follow these steps and lock down your Oracle Configurator. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| oracle/configurator | ≥ 12.2.3, ≤ 12.2.14 | — |