Vulnerability in Oracle Enterprise Manager Base Platform Log Management Component

CVE-2024-20917

Summary

A vulnerability exists in the Log Management component of Oracle's Enterprise Manager Base Platform that could be exploited by an unauthenticated attacker with network access via HTTP. This vulnerability requires interaction from a user other than the attacker to be successfully exploited. While the primary impact is on the Oracle Enterprise Manager Base Platform, there may be significant implications for other connected products. Successful exploitation can lead to unauthorized access to sensitive data, including the ability to read, modify, or delete critical information. Additionally, it gives the attacker the potential to initiate a partial denial of service, disrupting the functionality of the Oracle Enterprise Manager Base Platform.

References