Unauthenticated Access Vulnerability in Oracle Partner Management of Oracle E-Business Suite
CVE-2024-21081

4.7MEDIUM

Key Information:

Vendor

Oracle
Status
Partner Management
Vendor
CVE Published:
16 April 2024

What is CVE-2024-21081?

A security vulnerability exists in the Oracle Partner Management component of the Oracle E-Business Suite. It allows unauthenticated attackers with network access via HTTP to potentially exploit the system. The attack, requiring human interaction from a user other than the attacker, could lead to unauthorized modifications, including updates, inserts, or deletions of accessible data within the Oracle Partner Management product. Although primarily affecting Oracle Partner Management, this vulnerability has implications that may extend to other interconnected products within the suite.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://www.oracle.com/security-alerts/cpuapr2024.html

CVSS V3.1

Score:
4.7
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

JSON
.