Oracle Banking Liquidity Management Vulnerability Allows Low Privileged Attackers to Compromise System
CVE-2024-21284
Key Information:
- Vendor
Oracle
- Vendor
- CVE Published:
- 15 October 2024
What is CVE-2024-21284?
A vulnerability exists in Oracle Banking Liquidity Management, specifically in the Reports component. This security flaw has the potential to be exploited by a low-privileged attacker who has network access via HTTP. Notably, this exploitation requires human interaction from a person other than the attacker, which adds a layer of complexity to the attack. If successfully exploited, this vulnerability could allow unauthorized access leading to a potential takeover of the Oracle Banking Liquidity Management system. Users and administrators of affected versions should be aware of this risk and take appropriate measures to secure their applications.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Oracle Banking Liquidity Management 14.5.0.12.0
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved