Lucene search

K
cve[email protected]CVE-2024-21117
HistoryApr 16, 2024 - 10:15 p.m.

CVE-2024-21117

2024-04-1622:15:33
web.nvd.nist.gov
28
vulnerability
oracle
outside in technology
unauthorized access
partial denial of service
cve-2024-21117
fusion middleware
infrastructure
exploitable

5.3 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). Supported versions that are affected are 8.5.6 and 8.5.7. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Outside In Technology executes to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Outside In Technology accessible data as well as unauthorized read access to a subset of Oracle Outside In Technology accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Outside In Technology. CVSS 3.1 Base Score 5.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).

Affected configurations

Vulners
Node
oracleoutside_in_technologyRange8.5.6
OR
oracleoutside_in_technologyRange8.5.7
VendorProductVersionCPE
oracleoutside_in_technology*cpe:2.3:a:oracle:outside_in_technology:*:*:*:*:*:*:*:*
oracleoutside_in_technology*cpe:2.3:a:oracle:outside_in_technology:*:*:*:*:*:*:*:*

CNA Affected

[
  {
    "vendor": "Oracle Corporation",
    "product": "Outside In Technology",
    "cpes": [
      "cpe:2.3:a:oracle:outside_in_technology:8.5.6:*:*:*:*:*:*:*",
      "cpe:2.3:a:oracle:outside_in_technology:8.5.7:*:*:*:*:*:*:*"
    ],
    "versions": [
      {
        "version": "8.5.6",
        "status": "affected"
      },
      {
        "version": "8.5.7",
        "status": "affected"
      }
    ]
  }
]

5.3 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Related for CVE-2024-21117