Impact Analysis

This vulnerability can have significant impacts including unauthorized creation, deletion, or modification of critical data within Oracle Data Integrator.

An attacker can gain unauthorized access to critical or all data accessible through Oracle Data Integrator, potentially leading to data breaches.

It can also result in a partial denial of service (partial DOS), affecting the availability of Oracle Data Integrator services.

Useful 0 Not Useful 0

Executive Summary

This vulnerability exists in the Oracle Data Integrator product of Oracle Fusion Middleware, specifically in the Market Place component. It affects supported versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is easily exploitable by a low privileged attacker who has network access via HTTP.

Successful exploitation allows the attacker to compromise Oracle Data Integrator by unauthorized creation, deletion, or modification of critical data or any data accessible through Oracle Data Integrator. Additionally, the attacker can gain unauthorized access to critical or all accessible data and can cause a partial denial of service (partial DOS) of the Oracle Data Integrator.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability allows a low privileged attacker with network access to compromise Oracle Data Integrator, potentially resulting in unauthorized creation, deletion, or modification of critical data, as well as unauthorized access to all accessible data. Such unauthorized access and data manipulation can lead to violations of data protection requirements under common standards and regulations like GDPR and HIPAA, which mandate strict controls over data confidentiality, integrity, and availability.

Therefore, exploitation of this vulnerability could result in non-compliance with these regulations due to breaches of data confidentiality and integrity, and potential denial of service impacting data availability.

Useful 0 Not Useful 0