Authentication Bypass Vulnerability in Oracle E-Business Suite

CVE-2024-21045

Summary

A vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite enables unauthenticated attackers with network access to exploit the service through HTTP. This vulnerability could allow unauthorized updates, insertions, or deletions of accessible data, as well as unauthorized read access to a subset of that data. Successful exploitation of this issue requires interaction from a user other than the attacker. Notably, while primarily affecting the Complex Maintenance, Repair, and Overhaul component, the repercussions may extend to other integrated Oracle products, increasing the potential scope of impact.

References