CVE-2024-21153

Summary

CVE-2024-21153 is a newly identified vulnerability affecting the Quality Management Specs component of Oracle E-Business Suite's Process Manufacturing Product Development (supported version 12.2.13). This issue allows a low-privileged attacker with network access via HTTP to compromise the system, potentially granting unauthorized access to critical data or complete access to all Oracle Process Manufacturing Product Development accessible data. The impact of successful attacks can result in data deletion, modification, or unauthorized creation. The Base Score, according to CVSS 3.1, is 8.1 for both Confidentiality and Integrity impacts. The attack vector involves network access with a low level of privilege required, making it easily exploitable.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.