The vulnerability of the Claim Line LOV component of the Oracle Trade Management software for managing trading operations in the Oracle E-Business Suite allows a perpetrator to gain unauthorized access to protected information.

🗓️ 26 Apr 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 3 Views

The Claim Line List vulnerability in Oracle Trade Management allows unauthorized access due to insufficient input validation.

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2024-21075	13 Aug 202415:58	–	circl
CNNVD	Oracle E-Business Suite 的 Oracle Trade Management 安全漏洞	16 Apr 202400:00	–	cnnvd
CVE	CVE-2024-21075	16 Apr 202421:26	–	cve
Cvelist	CVE-2024-21075	16 Apr 202421:26	–	cvelist
EUVD	EUVD-2024-18789	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Oracle E-Business Suite	18 Apr 202400:00	–	ncsc
NVD	CVE-2024-21075	16 Apr 202422:15	–	nvd
Oracle	Oracle Critical Patch Update Advisory - April 2024	16 Apr 202400:00	–	oracle
Tenable Nessus	Oracle E-Business Suite (April 2024 CPU)	19 Apr 202400:00	–	nessus
OSV	CVE-2024-21075	16 Apr 202422:15	–	osv

Vulners

Node

oracle e-business_suiteRange12.2.3–12.2.13

OR

oracle trade_managementRange12.2.3–12.2.13

Source	Link
oracle	www.oracle.com/security-alerts/cpuapr2024.html
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2024041712
vuldb	www.vuldb.com/ru/
web	www.web.nvd.nist.gov/view/vuln/detail

26 Apr 2024 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 37.5

CVSS 27.8

EPSS0.00657

Claim Line List Input Validation Unauthorized Access Oracle Trade Management