CVE-2026-21972 | Oracle Configurator up to 12.2.15 User Interface information disclosure

A vulnerability categorized as problematic has been discovered in Oracle Configurator up to 12.2.15. Affected by this vulnerability is an unknown functionality of the component User Interface. Such manipulation leads to information disclosure.

This vulnerability is documented as CVE-2026-21972. The attack can be executed remotely. There is not any exploit available.

It is advisable to upgrade the affected component.