CVE-2024-21191

5 documents5 sources
Severity
7.6HIGH
EPSS
0.5%
top 34.49%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Oracle Corporation Oracle Enterprise Manager Fusion Middleware ControlOracle Fusion Middleware
Timeline
PublishedOct 15

Description

Vulnerability in the Oracle Enterprise Manager Fusion Middleware Control product of Oracle Fusion Middleware (component: FMW Control Plugin). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise Manager Fusion Middleware Control. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Enterprise Manager F…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:NExploitability: 2.3 | Impact: 4.7

Affected Packages2 packages

▶NVDoracle/fusion_middleware12.2.1.4.0

🔴Vulnerability Details

2
CVEList
CVE-2024-21191: Vulnerability in the Oracle Enterprise Manager Fusion Middleware Control product of Oracle Fusion Middleware (component: FMW Control Plugin)↗2024-10-15
▶
GHSA
GHSA-m3rx-w78v-9p56: Vulnerability in the Oracle Enterprise Manager Fusion Middleware Control product of Oracle Fusion Middleware (component: FMW Control Plugin)↗2024-10-15
▶

📋Vendor Advisories

2
Oracle
Oracle Oracle Fusion Middleware Risk Matrix: FMW Control Plugin — CVE-2024-21191↗2024-10-15
▶
Red Hat
Oracle Fusion Middleware: From CVEorg collector↗2024-10-15
▶