CVE-2024-21276

Summary

CVE-2024-21276 is a vulnerability found in the Oracle Work in Process component of the Oracle E-Business Suite, specifically affecting versions 12.2.3 to 12.2.13. This flaw allows a low-privileged attacker with network access via HTTP to gain unauthorized control over critical data, enabling actions such as creation, deletion, or modification of accessible data. The CVSS 3.1 Base Score for this vulnerability is 8.1, indicating high severity due to significant impacts on confidentiality and integrity without requiring user interaction. Organizations are advised to remediate this vulnerability by applying security updates provided by Oracle, as successful exploitation can lead to severe data breaches and operational disruptions. For further details on mitigation strategies, users can refer to the official Oracle security alerts page.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.