CVE-2024-21285 — Incorrect Authorization in Corporation Oracle Banking Liquidity Management

CWE-863 — Incorrect Authorization5 documents5 sources
Severity
7.1HIGHNVD
EPSS
1.1%
top 22.27%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Oracle Corporation Oracle Banking Liquidity ManagementOracle Banking Liquidity Management
Timeline
PublishedOct 15

Description

Vulnerability in the Oracle Banking Liquidity Management product of Oracle Financial Services Applications (component: Reports). The supported version that is affected is 14.5.0.12.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Liquidity Management. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Banking Liqu…

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:HExploitability: 1.2 | Impact: 5.9

Affected Packages2 packages

🔴Vulnerability Details

2
CVEList
CVE-2024-21285: Vulnerability in the Oracle Banking Liquidity Management product of Oracle Financial Services Applications (component: Reports)↗2024-10-15
▶
GHSA
GHSA-gp4x-q6rm-qp9m: Vulnerability in the Oracle Banking Liquidity Management product of Oracle Financial Services Applications (component: Reports)↗2024-10-15
▶

📋Vendor Advisories

2
Oracle
Oracle Oracle Financial Services Applications Risk Matrix: Reports — CVE-2024-21285↗2024-10-15
▶
Red Hat
Reports: From CVEorg collector↗2024-10-15
▶
CVE-2024-21285 — Incorrect Authorization | cvebase