CVE-2024-21205
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Oct 15, 2024
Updated: Mar 13, 2025
CWE ID 200
Summary
CVE-2024-21205 is a vulnerability affecting Oracle Service Bus, a component of Oracle Fusion Middleware (version 12.2.1.4.0). This issue enables low-privileged attackers with network access to compromise the Oracle Service Bus, potentially resulting in unauthorized access to sensitive data. The Confidentiality impact of this vulnerability is high, with a base score of 6.5 according to the CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N). Exploitation of this vulnerability does not require user interaction.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Oracle Fusion Middleware