CVE-2024-21277

Summary

CVE-2024-21277 is a vulnerability found in the Oracle MES for Process Manufacturing component of the Oracle E-Business Suite, affecting versions 12.2.3 to 12.2.13. This easily exploitable flaw allows low-privileged attackers with network access via HTTP to gain unauthorized control over critical data, potentially enabling the creation, deletion, or modification of all accessible data within the product. The vulnerability has a CVSS 3.1 Base Score of 8.1, indicating high severity with significant impacts on confidentiality and integrity but no availability impact. Organizations are advised to remediate this issue by applying security patches provided by Oracle as outlined in their security alerts. Failure to address this vulnerability could lead to severe data breaches and compromise sensitive organizational information.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.