CVE-2024-21038

Summary

CVE-2024-21038 is a vulnerability affecting the Oracle Complex Maintenance, Repair, and Overhaul component of Oracle E-Business Suite, versions 12.2.3 to 12.2.13. This easily exploitable issue allows unauthenticated attackers with network access via HTTP to compromise the product. Successful attacks necessitate human interaction and may extend to impacting additional products. The vulnerability could result in unauthorized updating, inserting, or deleting of some Oracle Complex Maintenance, Repair, and Overhaul data, as well as unauthorized reading of a subset of data. The CVSS Base Score is 6.1, with Confidentiality and Integrity impacts. (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.