CVE-2024-21275: High severity oracle e-business suite vulnerability
Vulnerability in the Oracle Quoting product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.2.7-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Quoting. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Quoting accessible data as well as unauthorized access to critical data or complete access to all Oracle Quoting accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-21275?
CVE-2024-21275 has been assigned a severity rating of medium due to its potential for exploitation by low privileged attackers.
How do I fix CVE-2024-21275?
To fix CVE-2024-21275, update your Oracle E-Business Suite to a version higher than 12.2.13.
What components of Oracle E-Business Suite are affected by CVE-2024-21275?
CVE-2024-21275 specifically affects the User Interface component of the Oracle Quoting product in the Oracle E-Business Suite.
Who can exploit CVE-2024-21275?
CVE-2024-21275 can be exploited by low privileged attackers with network access via HTTP.
What versions of Oracle E-Business Suite are vulnerable to CVE-2024-21275?
The vulnerable versions of Oracle E-Business Suite for CVE-2024-21275 are from 12.2.7 to 12.2.13.