Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Request Submission and Scheduling). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Concurrent Processing. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Concurrent Processing accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).
History

Fri, 06 Dec 2024 22:00:00 +0000

Type Values Removed Values Added
Weaknesses NVD-CWE-noinfo
CPEs cpe:2.3:a:oracle:concurrent_processing:*:*:*:*:*:*:*:*

cve-icon MITRE

Status: PUBLISHED

Assigner: oracle

Published: 2024-04-16T21:26:28.487Z

Updated: 2024-08-01T22:13:42.674Z

Reserved: 2023-12-07T22:28:10.669Z

Link: CVE-2024-21089

cve-icon Vulnrichment

Updated: 2024-08-01T22:13:42.674Z

cve-icon NVD

Status : Analyzed

Published: 2024-04-16T22:15:28.987

Modified: 2024-12-06T21:40:57.603

Link: CVE-2024-21089

cve-icon Redhat

No data.