Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Finance LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trade Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Trade Management accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
References
Configurations
No configuration.
History
21 Nov 2024, 08:53
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.oracle.com/security-alerts/cpuapr2024.html - |
08 Jul 2024, 14:17
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
|
| CWE | CWE-284 |
16 Apr 2024, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-04-16 22:15
Updated : 2024-11-21 08:53
NVD link : CVE-2024-21074
Mitre link : CVE-2024-21074
CVE.ORG link : CVE-2024-21074
JSON object : View
Products Affected
No product.
CWE
CWE-284
Improper Access Control