Authentication Bypass Vulnerability in Oracle E-Business Suite
CVE-2024-21045
Key Information:
- Vendor
Oracle
- Vendor
- CVE Published:
- 16 April 2024
What is CVE-2024-21045?
A vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite enables unauthenticated attackers with network access to exploit the service through HTTP. This vulnerability could allow unauthorized updates, insertions, or deletions of accessible data, as well as unauthorized read access to a subset of that data. Successful exploitation of this issue requires interaction from a user other than the attacker. Notably, while primarily affecting the Complex Maintenance, Repair, and Overhaul component, the repercussions may extend to other integrated Oracle products, increasing the potential scope of impact.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Complex Maintenance, Repair, and Overhaul 12.2.3 <= 12.2.13
References
CVSS V3.1
Timeline
Vulnerability published