Unauthenticated Data Manipulation in Oracle WebCenter Imaging

Executive Summary

This vulnerability exists in the Oracle Fusion Middleware WebCenter Content: Imaging product, specifically in versions 12.2.1.4.0 and 14.1.2.0.0. It is an easily exploitable flaw that allows an unauthenticated attacker with network access via HTTP to compromise the system.

Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data or any data accessible through WebCenter Content: Imaging.

Useful 0 Not Useful 0

Impact Analysis

The impact of this vulnerability is severe as it allows an attacker to gain unauthorized access to critical data or even complete access to all data accessible through WebCenter Content: Imaging.

This can result in unauthorized creation, deletion, or modification of important data, potentially leading to data loss, data corruption, or exposure of sensitive information.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability allows an unauthenticated attacker to gain unauthorized creation, deletion, or modification access to critical data within Oracle WebCenter Content: Imaging. Such unauthorized access and potential data compromise can lead to violations of data protection requirements mandated by common standards and regulations like GDPR and HIPAA, which require strict controls over data confidentiality and integrity.

Because the vulnerability impacts confidentiality and integrity with a high severity score (CVSS 9.1), organizations using affected versions may face increased risk of non-compliance due to potential data breaches or unauthorized data manipulation.

Useful 0 Not Useful 0