CVE-2024-21079

Summary

CVE-2024-21079 is a newly discovered vulnerability affecting the Oracle Marketing component of Oracle E-Business Suite, versions 12.2.3 to 12.2.13. This easily exploitable issue allows unauthenticated attackers with network access via HTTP to compromise Oracle Marketing. Successful attacks can lead to unauthorized access to sensitive data or complete access to all Oracle Marketing data, posing a significant confidentiality risk. The vulnerability has been assigned a base score of 7.5 (High) in the Common Vulnerability Scoring System (CVSS).

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.