Lucene search

K
cveOracleCVE-2024-21118
HistoryApr 16, 2024 - 10:15 p.m.

CVE-2024-21118

2024-04-1622:15:34
oracle
web.nvd.nist.gov
43
oracle fusion middleware
outside in technology
vulnerability
unauthorized access
denial of service
cvss 3.1
nvd

CVSS3

5.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

AI Score

6.5

Confidence

High

EPSS

0

Percentile

9.0%

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). Supported versions that are affected are 8.5.6 and 8.5.7. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Outside In Technology executes to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Outside In Technology accessible data as well as unauthorized read access to a subset of Oracle Outside In Technology accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Outside In Technology. CVSS 3.1 Base Score 5.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).

Affected configurations

Vulners
Node
oracleoutside_in_technologyRange8.5.6
OR
oracleoutside_in_technologyRange8.5.7
VendorProductVersionCPE
oracleoutside_in_technology*cpe:2.3:a:oracle:outside_in_technology:*:*:*:*:*:*:*:*

CNA Affected

[
  {
    "vendor": "Oracle Corporation",
    "product": "Outside In Technology",
    "cpes": [
      "cpe:2.3:a:oracle:outside_in_technology:8.5.6:*:*:*:*:*:*:*",
      "cpe:2.3:a:oracle:outside_in_technology:8.5.7:*:*:*:*:*:*:*"
    ],
    "versions": [
      {
        "version": "8.5.6",
        "status": "affected"
      },
      {
        "version": "8.5.7",
        "status": "affected"
      }
    ]
  }
]

CVSS3

5.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

AI Score

6.5

Confidence

High

EPSS

0

Percentile

9.0%

Related for CVE-2024-21118