Oracle Process Manufacturing Financials Vulnerability
CVE-2024-21152

8.1HIGH

Key Information:

Vendor

Oracle
Status
Process Manufacturing Financials
Vendor
CVE Published:
16 July 2024

What is CVE-2024-21152?

A vulnerability exists in the Allocation Rules component of the Oracle Process Manufacturing Financials product within Oracle E-Business Suite. This flaw can be exploited by an attacker with low privileges and network access via HTTP, potentially leading to unauthorized actions. Successful exploitation enables attackers to create, delete, or modify critical data, resulting in unauthorized access to all data accessible through Oracle Process Manufacturing Financials. This vulnerability emphasizes the need for attention to data security and comprehensive protection strategies.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Process Manufacturing Financials 12.2.12 <= 12.2.13

References

https://www.oracle.com/security-alerts/cpujul2024.html
vendor-advisory

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.