Vulnerability in Oracle iSupport of Oracle E-Business Suite

CVE-2024-20944

Summary

The vulnerability in Oracle iSupport within the Oracle E-Business Suite allows attackers with low privileges to exploit the system through network access via HTTP. This vulnerability, while residing in Oracle iSupport, has the potential to affect other components significantly. Successful exploitation may lead to unauthorized modifications, deletions, or access to data managed by Oracle iSupport. Importantly, successful attacks necessitate user interaction from a party other than the attacker, highlighting a critical point of risk. Organizations utilizing the affected versions of Oracle E-Business Suite must implement recommended security measures to mitigate potential impacts.

References