Vulnerability in Oracle E-Business Suite Affecting Complex Maintenance, Repair, and Overhaul Component

CVE-2024-21032

Summary

A vulnerability exists in the Oracle Complex Maintenance, Repair, and Overhaul component of the Oracle E-Business Suite. This flaw allows unauthenticated attackers with network access to leverage HTTP connections to compromise the system. Successful exploitation can lead to unauthorized actions such as updates, inserts, or deletions of accessible data. Furthermore, attackers can gain unauthorized read access to certain data sets within the application. Notably, the nature of the attack necessitates user interaction, though the attack vector could have wider implications across various products.

References