Authentication Bypass Vulnerability in Oracle E-Business Suite
CVE-2024-21045

6.1MEDIUM

Key Information:

Vendor

Oracle

Vendor
CVE Published:
16 April 2024

What is CVE-2024-21045?

A vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite enables unauthenticated attackers with network access to exploit the service through HTTP. This vulnerability could allow unauthorized updates, insertions, or deletions of accessible data, as well as unauthorized read access to a subset of that data. Successful exploitation of this issue requires interaction from a user other than the attacker. Notably, while primarily affecting the Complex Maintenance, Repair, and Overhaul component, the repercussions may extend to other integrated Oracle products, increasing the potential scope of impact.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

Complex Maintenance, Repair, and Overhaul 12.2.3 <= 12.2.13

References

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

.