CVE-2024-21034

Summary

CVE-2024-21034 is a vulnerability affecting Oracle E-Business Suite's Oracle Complex Maintenance, Repair, and Overhaul component (LOV) in versions 12.2.3 to 12.2.13. This issue allows unauthenticated attackers with network access to compromise the product via HTTP. Successful exploitation requires human interaction and may result in unauthorized data access, including update, insert, delete, and read privileges. The impact extends beyond Oracle Complex Maintenance, Repair, and Overhaul, potentially affecting other products as well. The CVSS Base Score is 6.1, indicating moderate levels of Confidentiality and Integrity risks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.