Unauthorized Data Access in Oracle Purchasing by Oracle Corporation

CVE-2024-21132

What is CVE-2024-21132?

A vulnerability exists in the Oracle Purchasing component of Oracle E-Business Suite, allowing low-privileged attackers with network access via HTTP to exploit the system. Successful exploitation requires interaction from a user other than the attacker, leading to unauthorized update, insert, or delete actions on Oracle Purchasing data. Additionally, attackers might gain unauthorized read access to certain subsets of Oracle Purchasing accessible data. This issue may also impact other products within the suite, significantly broadening the scope of potential threats.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References