CVE-2024-21092

CVSS 3.1 Score 8.1 of 10 (high)

Details

Published Apr 16, 2024
Updated: Apr 17, 2024

Summary

CVE-2024-21092 is a vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain. The affected version is 6.2.4.2. This vulnerability can be easily exploited by a low privileged attacker with network access via HTTP, allowing them to compromise the Oracle Agile Product Lifecycle Management for Process. Successful attacks can result in unauthorized creation, deletion, or modification access to critical data or all accessible data, as well as unauthorized access to critical data or complete access to all accessible data. The CVSS 3.1 Base Score is 8.1, indicating high impacts on confidentiality and integrity. Remediation measures are not provided in the given information.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-21092 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options