Lucene search

OracleCVE-2024-21048

HistoryApr 16, 2024 - 10:15 p.m.

CVE-2024-21048

2024-04-1622:15:21

oracle

web.nvd.nist.gov

oracle

vulnerability

e-business suite

desktop integrator

xml input

cvss 3.1

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

5.7

Confidence

High

EPSS

Percentile

14.0%

JSON

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: XML input). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Web Applications Desktop Integrator accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).

Affected configurations

Vulners

Node

oracleweb_applications_desktop_integratorRange12.0.0–12.2.13

VendorProductVersionCPE
oracleweb_applications_desktop_integrator*cpe:2.3:a:oracle:web_applications_desktop_integrator:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
oracle	web_applications_desktop_integrator	*	cpe:2.3:a:oracle:web_applications_desktop_integrator::::::::

CNA Affected

[
  {
    "vendor": "Oracle Corporation",
    "product": "Web Applications Desktop Integrator",
    "cpes": [
      "cpe:2.3:a:oracle:web_applications_desktop_integrator:12.2.3-12.2.13:*:*:*:*:*:*:*"
    ],
    "versions": [
      {
        "version": "12.2.3",
        "status": "affected",
        "lessThanOrEqual": "12.2.13",
        "versionType": "custom"
      }
    ]
  }
]

References

www.oracle.com/security-alerts/cpuapr2024.html

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

5.7

Confidence

High

EPSS

Percentile

14.0%

JSON

Related for CVE-2024-21048