CVE-2021-2271

Name of the Vulnerable Software and Affected Versions Oracle Work in Process versions 12.1.3 and 12.2.3 through 12.2.8

Description The issue is related to insufficient input validation in the Resource Exceptions component of Oracle Work in Process. This can be exploited by a remote attacker to disclose protected information or gain access to create, modify, or delete data using the HTTP protocol. Successful attacks can result in unauthorized access to critical data or complete access to all accessible data.

Recommendations For versions 12.1.3, update to a version that includes the fix for this issue. For versions 12.2.3 through 12.2.8, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to the Resource Exceptions component until a patch is available.