CVE-2024-21120

CWE-863 — Incorrect Authorization4 documents4 sources
Severity
5.3MEDIUM
EPSS
0.1%
top 77.38%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Oracle Corporation Outside IN TechnologyOracle Outside IN Technology
Timeline
PublishedApr 16
Latest updateApr 17

Description

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). Supported versions that are affected are 8.5.6 and 8.5.7. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Outside In Technology executes to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Outside In Technology a…

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:LExploitability: 1.8 | Impact: 3.4

Affected Packages2 packages

▶NVDoracle/outside_in_technology8.5.6, 8.5.7+1

🔴Vulnerability Details

2
GHSA
GHSA-8qv9-vpw9-7q8x: Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core)↗2024-04-17
▶
CVEList
CVE-2024-21120: Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core)↗2024-04-16
▶

📋Vendor Advisories

1
Oracle
Oracle Oracle Fusion Middleware Risk Matrix: Outside In Core — CVE-2024-21120↗2024-04-15
▶
CVE-2024-21120 (MEDIUM CVSS 5.3) | Vulnerability in the Oracle Outside | cvebase.io