CVE-2024-20945

Summary

CVE-2024-20951 is a vulnerability affecting Oracle E-Business Suite's Oracle Customer Interaction History product (Outcome-Result), with versions 12.2.3 to 12.2.13 being vulnerable. This issue is easily exploitable, allowing unauthenticated attackers with network access to compromise Oracle Customer Interaction History via HTTP. Human interaction is required for a successful attack, but the scope may extend to impacting additional products. The consequences of a successful attack can result in unauthorized update, insert, or delete access to some data, as well as unauthorized read access to a subset of data within Oracle Customer Interaction History. The CVSS Base Score is 6.1, with Confidentiality and Integrity impacts.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.