CVE-2024-20941

Summary

CVE-2024-20941 is a vulnerability affecting the Oracle Installed Base component of Oracle E-Business Suite (versions 12.2.3-12.2.13). This easily exploitable issue allows unauthenticated attackers with network access to compromise Oracle Installed Base via HTTP. Successful attacks necessitate human interaction and may expand the attack surface, potentially impacting other products. The consequences of a successful exploit include unauthorized update, insert, or delete access to certain Oracle Installed Base data, as well as unauthorized read access to a subset of data. The CVSS Base Score is 6.1 for Confidentiality and Integrity impacts. (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.