Unauthenticated Access Vulnerability in Oracle Partner Management of Oracle E-Business Suite
CVE-2024-21081

4.7MEDIUM

Key Information:

Vendor
Oracle
Status
Partner Management
Vendor
CVE Published:
16 April 2024

Summary

A security vulnerability exists in the Oracle Partner Management component of the Oracle E-Business Suite. It allows unauthenticated attackers with network access via HTTP to potentially exploit the system. The attack, requiring human interaction from a user other than the attacker, could lead to unauthorized modifications, including updates, inserts, or deletions of accessible data within the Oracle Partner Management product. Although primarily affecting Oracle Partner Management, this vulnerability has implications that may extend to other interconnected products within the suite.

References

https://www.oracle.com/security-alerts/cpuapr2024.html

CVSS V3.1

Score:
4.7
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

.