CVE-2023-22009 - Vulnerability in the Oracle Self-Service Human Resources product of Oracle E-Business Suite (component: Workforce Management)

Back Back to CVE browser

MEDIUM

Vulnerability in the Oracle Self-Service Human Resources product of Oracle E-Business Suite (component: Workforce Management)

Published Jul 18, 2023

4.3

MEDIUM

CVSS 3.1

EPSS 0.45%

Description

Vulnerability in the Oracle Self-Service Human Resources product of Oracle E-Business Suite (component: Workforce Management). Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Self-Service Human Resources. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Self-Service Human Resources accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).

Affected products

Vendor Oracle Corporation Product Self-Service Human Resources Default
n/a
- Version
  12.2.3
  Status
  affected
  Constraints
  <=12.2.12

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Oracle Corporation

Self-Service Human Resources

n/a

Version	Status	Constraints
12.2.3	affected	<=12.2.12

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-26174
Advisory
https://www.oracle.com/security-alerts/cpujul2023.html
vendor-advisoryPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-26174		Advisory
https://www.oracle.com/security-alerts/cpujul2023.html		vendor-advisoryPatchVendor Advisory