CVE-2024-21086

4 documents4 sources
Severity
4.3MEDIUM
EPSS
0.3%
top 50.93%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Oracle Corporation CRM Technical FoundationOracle Customer Relationship Management Technical Foundation
Timeline
PublishedApr 16
Latest updateApr 17

Description

Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to s…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages2 packages

▶CVEListV5oracle_corporation/crm_technical_foundation12.2.3 — 12.2.13

🔴Vulnerability Details

2
GHSA
GHSA-2r49-j3rm-3fj2: Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences)↗2024-04-17
▶
CVEList
CVE-2024-21086: Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences)↗2024-04-16
▶

📋Vendor Advisories

1
Oracle
Oracle Oracle E-Business Suite Risk Matrix: Preferences — CVE-2024-21086↗2024-04-15
▶
CVE-2024-21086 (MEDIUM CVSS 4.3) | Vulnerability in the Oracle CRM Tec | cvebase.io