Unauthenticated Network Vulnerability in Oracle E-Business Suite's Maintenance and Repair Component

CVE-2024-21020

Summary

An unauthenticated network vulnerability has been identified in the Oracle E-Business Suite's Complex Maintenance, Repair, and Overhaul component, affecting versions 12.2.3 through 12.2.13. This vulnerability allows an attacker with network access via HTTP to potentially manipulate sensitive data. Successful exploitation requires human interaction from a user who is not the attacker, which could lead to unauthorized updates, inserts, and deletions of accessible data. In addition, it permits unauthorized read access to certain data segments, amplifying the risk of significant impacts across related products. Organizations should prioritize timely remediation to protect their systems.

References