Vulnerability in Oracle E-Business Suite's Complex Maintenance, Repair, and Overhaul Product

CVE-2024-21018

Summary

A vulnerability exists in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite, affecting versions 12.2.3 to 12.2.13. This vulnerability enables an unauthenticated attacker with network access via HTTP to compromise the system, requiring human interaction from a user other than the attacker. While primarily located in the Oracle Complex Maintenance, Repair, and Overhaul product, successful exploitation can have a broader impact on related Oracle products. The vulnerability allows unauthorized updates, inserts, or deletions to accessible data, as well as unauthorized read access to certain data subsets, potentially leading to significant security implications.

References