Executive Summary

This vulnerability exists in the APM - Application Performance Management product of Oracle Enterprise Manager, specifically in the JADM and JVM Diagnostics components.

It affects supported versions 13.5 and 24.1 and allows an unauthenticated attacker with network access via HTTP to exploit the system.

The attacker can compromise the APM system by unauthorized creation, deletion, or modification of critical data or any accessible data within APM.

Additionally, the attacker can cause the system to hang or repeatedly crash, resulting in a complete denial of service (DoS).

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can have serious impacts including unauthorized modification or deletion of critical data within the APM system.

It can also lead to a complete denial of service by causing the system to hang or crash repeatedly.

Because the vulnerability can be exploited without authentication and remotely via HTTP, it poses a high risk to the integrity and availability of the affected system.

Useful 0 Not Useful 0

Compliance Impact

The vulnerability allows an unauthenticated attacker with network access to compromise the Application Performance Management product, resulting in unauthorized creation, deletion, or modification of critical data and the ability to cause denial of service. Such unauthorized access and data integrity issues could potentially impact compliance with standards and regulations that require protection of data integrity and availability, such as GDPR and HIPAA.

However, the provided information does not explicitly mention the impact on compliance with specific standards or regulations.

Useful 0 Not Useful 0