CVE-2024-21205: Infoleak
Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: OSB Core Functionality). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Service Bus. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Service Bus accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-21205?
CVE-2024-21205 has been rated as easily exploitable, allowing low privileged attackers to compromise Oracle Service Bus.
What versions are affected by CVE-2024-21205?
CVE-2024-21205 affects Oracle Fusion Middleware version 12.2.1.4.0.
How do I fix CVE-2024-21205?
To remediate CVE-2024-21205, it is recommended to apply the appropriate security patches provided by Oracle.
Is CVE-2024-21205 remotely exploitable?
Yes, CVE-2024-21205 can be exploited remotely via HTTP by attackers with low privileges.
What component of Oracle is affected by CVE-2024-21205?
CVE-2024-21205 impacts the OSB Core Functionality of the Oracle Service Bus in Oracle Fusion Middleware.