Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: REST Services). Supported versions that are affected are 12.2.9-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Applications Framework accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).
History

Fri, 06 Dec 2024 21:30:00 +0000

Type Values Removed Values Added
Weaknesses NVD-CWE-noinfo
CPEs cpe:2.3:a:oracle:applications_framework:*:*:*:*:*:*:*:*

Thu, 31 Oct 2024 19:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: oracle

Published: 2024-04-16T21:26:25.378Z

Updated: 2024-10-31T18:28:06.991Z

Reserved: 2023-12-07T22:28:10.667Z

Link: CVE-2024-21080

cve-icon Vulnrichment

Updated: 2024-08-01T22:13:42.197Z

cve-icon NVD

Status : Analyzed

Published: 2024-04-16T22:15:27.423

Modified: 2024-12-06T21:12:20.787

Link: CVE-2024-21080

cve-icon Redhat

No data.