Improper input validation in Oracle Enterprise Session Border Controller - CVE-2023-22083
Published: October 18, 2023
Vulnerability identifier: #VU82210
CSH Severity: Low
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2023-22083
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote non-authenticated attacker to gain access to sensitive information.
The vulnerability exists due to improper input validation within the Web UI component in Oracle Enterprise Session Border Controller. A remote non-authenticated attacker can exploit this vulnerability to gain access to sensitive information.
Affected software
Oracle Enterprise Session Border Controller
Oracle Enterprise Communications Broker
Oracle Enterprise Communications Broker
How to mitigate CVE-2023-22083
Install updates from vendor's website.