CVE-2024-36246: Critical severity Oracle Unifier vulnerability

Published May 31, 2024

Updated

Missing authorization vulnerability exists in Unifier and Unifier Cast. If this vulnerability is exploited, arbitrary code may be executed with LocalSystem privilege. As a result, a malicious program may be installed, data may be altered or deleted.

Affected Software

2 affected components

Oracle Unifier

Oracle Unifier Cast

Event History

May 31, 2024

CVE Published

via MITRE·06:11 AM

Data Sourced

via MITRE·06:11 AM

DescriptionSeverity

Data Sourced

via NVD·06:15 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-36246?

CVE-2024-36246 is considered a critical vulnerability due to its ability to allow arbitrary code execution with LocalSystem privileges.

How do I fix CVE-2024-36246?

To remediate CVE-2024-36246, update to the latest patched version of both Oracle Unifier and Oracle Unifier Cast.

What impact can CVE-2024-36246 have on my system?

Exploitation of CVE-2024-36246 can result in the installation of malicious programs and unauthorized alteration or deletion of data.

Which products are affected by CVE-2024-36246?

The products affected by CVE-2024-36246 are Oracle Unifier and Oracle Unifier Cast.

How can I determine if my system is vulnerable to CVE-2024-36246?

To check for vulnerability to CVE-2024-36246, verify the version of Oracle Unifier or Oracle Unifier Cast in use against the latest advisory from Oracle.