CVE-2023-21848

Name of the Vulnerable Software and Affected Versions Oracle Communications Convergence versions 3.0.3.1.0

Description The issue is related to insufficient input validation in the Admin Configuration component of Oracle Communications Convergence, part of Oracle Communications Applications. This can be exploited by a remote attacker with low privileges and network access via HTTP, potentially leading to the takeover of Oracle Communications Convergence.

Recommendations For version 3.0.3.1.0, consider restricting access to the Admin Configuration component until a patch is available. As a temporary workaround, limit network access via HTTP to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.