CVE-2024-20929: Medium severity Oracle Application Object Library vulnerability
Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: DB Privileges). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Application Object Library accessible data as well as unauthorized read access to a subset of Oracle Application Object Library accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Oracle E-Business Suite - Oracle Application Object Library (component: DB Privileges)to a version that resolves this vulnerability.Fixed in 12.2.3-12.2.13
Event History
Frequently Asked Questions
What is the severity of CVE-2024-20929?
CVE-2024-20929 is rated as an easily exploitable vulnerability allowing unauthenticated access.
How do I fix CVE-2024-20929?
To fix CVE-2024-20929, apply the latest security patches provided by Oracle for affected versions.
Which versions are affected by CVE-2024-20929?
CVE-2024-20929 affects Oracle Application Object Library versions 12.2.3 to 12.2.13.
What component is impacted by CVE-2024-20929?
CVE-2024-20929 impacts the DB Privileges component of the Oracle Application Object Library.
Can CVE-2024-20929 be exploited remotely?
Yes, CVE-2024-20929 can be exploited remotely via HTTP by an unauthenticated attacker.