Vulnerability in Oracle E-Business Suite Quoting Component

CVE-2024-21275

Summary

A critical vulnerability exists in the Oracle Quoting component of the Oracle E-Business Suite, exposing supported versions (12.2.7 to 12.2.13) to significant security risks. This vulnerability allows attackers with low privileges and network access via HTTP to compromise the Oracle Quoting product. Exploitation can lead to unauthorized actions such as the creation, deletion, or alteration of critical data within Oracle Quoting, potentially granting malicious actors extensive access to sensitive information. The vulnerability impacts both Confidentiality and Integrity, with serious implications for data security. It is essential for affected organizations to assess their exposure and implement appropriate security measures to safeguard their systems. For detailed information and remediation steps, refer to the Oracle Advisory.

References