CVE-2024-21078: High severity oracle marketing vulnerability
Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Campaign LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Marketing accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-21078?
CVE-2024-21078 is classified as an easily exploitable vulnerability allowing unauthorized access.
How do I fix CVE-2024-21078?
To remediate CVE-2024-21078, apply the latest security patches provided by Oracle for affected versions.
Which versions of Oracle Marketing are affected by CVE-2024-21078?
Versions 12.2.3 to 12.2.13 of Oracle Marketing are affected by CVE-2024-21078.
Can CVE-2024-21078 be exploited remotely?
Yes, CVE-2024-21078 can be exploited remotely by an unauthenticated attacker over HTTP.
What component is affected by CVE-2024-21078 in the Oracle E-Business Suite?
The Campaign LOV component of the Oracle Marketing product is affected by CVE-2024-21078.