Skip to content
Sign in
4.3 Medium

CVE-2023-22083 Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications (component: Web UI)

Description

Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications (component: Web UI). Supported versions that are affected are 9.0-9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Enterprise Session Border Controller. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Enterprise Session Border Controller accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).

Affected products and versions

Product Affected versions Fixed in
Enterprise Communications Broker 4.1 No fix stated
Enterprise Communications Broker 4.0 No fix stated
Enterprise Communications Broker 3.3 No fix stated
Enterprise Session Border Controller 9.0 9.0 → 9.2 No fix stated

Other CVEs of Enterprise Communications Broker

The 4 CVEs of Enterprise Communications Broker →
CVE-2020-14721 Vulnerability in the Oracle Enterprise Communications Broker product of Oracle Communications Applications (component:… 6.3 Medium CVE-2020-14722 Vulnerability in the Oracle Enterprise Communications Broker product of Oracle Communications Applications (component:… 5.8 Medium CVE-2020-14563 Vulnerability in the Oracle Enterprise Communications Broker product of Oracle Communications Applications (component:… 6.1 Medium
Track this CVE