Oracle E-Business Suite Vulnerability Could Lead to Sensitive Data Compromise

CVE-2024-21252

What is CVE-2024-21252?

A vulnerability exists in the Item Catalog component of Oracle Product Hub within the Oracle E-Business Suite. This security issue impacts versions 12.2.3 through 12.2.13 and allows low-privileged attackers with network access via HTTP to potentially compromise the system. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data as well as unauthorized access to all data accessible within Oracle Product Hub. Given the implications on confidentiality and integrity, it is crucial for organizations using affected versions to assess their security measures and mitigate potential risks.

References