Vulnerability in the Oracle Enterprise Manager for Fusion Middleware product of Oracle Fusion Middleware (component: WebLogic Mgmt). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Enterprise Manager for Fusion Middleware executes to compromise Oracle Enterprise Manager for Fusion Middleware. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Enterprise Manager for Fusion Middleware accessible data. CVSS 3.1 Base Score 4.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N).
References
| Link | Resource |
|---|---|
| https://www.oracle.com/security-alerts/cpuoct2024.html | Vendor Advisory |
Configurations
History
18 Oct 2024, 14:18
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.oracle.com/security-alerts/cpuoct2024.html - Vendor Advisory | |
| First Time |
Oracle fusion Middleware
Oracle |
|
| CPE | cpe:2.3:a:oracle:fusion_middleware:12.2.1.4.0:*:*:*:*:*:*:* | |
| CWE | NVD-CWE-noinfo |
16 Oct 2024, 16:38
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
15 Oct 2024, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-10-15 20:15
Updated : 2024-10-18 14:18
NVD link : CVE-2024-21192
Mitre link : CVE-2024-21192
CVE.ORG link : CVE-2024-21192
JSON object : View
Products Affected
oracle
- fusion_middleware
CWE