CVE-2024-21028

Summary

CVE-2024-21028 is a vulnerability affecting Oracle E-Business Suite's Oracle Complex Maintenance, Repair, and Overhaul component (LOV), specifically versions 12.2.3 to 12.2.13. This issue is easily exploitable by unauthenticated attackers over HTTP, enabling them to compromise the Oracle Complex Maintenance, Repair, and Overhaul product. Successful attacks necessitate human interaction and could impact additional products. The consequences of such vulnerabilities include unauthorized data access, with both read and write privileges for a subset of the data. The Base Score, according to the Common Vulnerability Scoring System (CVSS) 3.1, is 6.1, representing confidentiality and integrity impacts.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.