Description
Oracle E-Business Suite contains a server-side request forgery (SSRF) vulnerability in the Runtime component of Oracle Configurator. This vulnerability is remotely exploitable without authentication.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Oracle Configurator | Oracle Corporation / Oracle Configurator | >= 12.2.3, <= 12.2.14 | affected |