CVE-2024-21284: High severity oracle banking liquidity management vulnerability

Published Oct 15, 2024

Updated

Vulnerability in the Oracle Banking Liquidity Management product of Oracle Financial Services Applications (component: Reports). The supported version that is affected is 14.5.0.12.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Liquidity Management. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Banking Liquidity Management. CVSS 3.1 Base Score 7.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H).

Affected Software

1 affected component

Oracle Banking Liquidity Management=14.5.0.12.0

Event History

Oct 15, 2024

CVE Published

via MITRE·07:53 PM

Data Sourced

via MITRE·07:53 PM

DescriptionSeverity

Data Sourced

via NVD·08:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-21284?

CVE-2024-21284 has been classified as a difficult-to-exploit vulnerability.

How do I fix CVE-2024-21284?

To fix CVE-2024-21284, update to the latest version of Oracle Banking Liquidity Management that addresses the vulnerability.

Who is affected by CVE-2024-21284?

CVE-2024-21284 affects users of Oracle Banking Liquidity Management version 14.5.0.12.0.

What type of access is required to exploit CVE-2024-21284?

CVE-2024-21284 can be exploited by low privileged attackers with network access via HTTP.

What component of Oracle Financial Services Applications is impacted by CVE-2024-21284?

The Reports component of the Oracle Banking Liquidity Management product is impacted by CVE-2024-21284.