CVE-2024-21096

Technical details about CVE-2024-21096 are not publicly provided in the supplied documents. Monitoring for updates is advised; the current sources do not specify affected products, versions, exploitability, or remediation within the given materials.

CVE-2024-21092

CVE-2024-21092 affects Oracle Agile Product Lifecycle Management for Process, specifically the Product Quality Management component in version 6.2.4.2. The vulnerability arises from insufficient input validation, enabling a low-privileged, network-accessing attacker over HTTP to perform unauthori...

CVE-2024-21085

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Concurrency. Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22; Oracle GraalVM Enterprise Edition: 20.3.13 and 21.3.9. Difficult to exploit vulnerability...

CVE-2024-21086

CVE-2024-21086 is a vulnerability in Oracle E-Business Suite's Oracle CRM Technical Foundation (Preferences) . Affected versions are 12.2.3–12.2.13 . The issue is exploitable by an unauthenticated attacker over HTTP and requires human interaction, potentially allowing an adversary to perform unau...

CVE-2024-21087

CVE-2024-21087 affects Oracle MySQL Server (Server: Group Replication Plugin). Affected versions: 8.0.36 and prior, and 8.3.0 and prior. An attacker with network access can exploit via multiple protocols to cause a hang or a complete DOS crash. CVSS 3.1 base score 4.9 (Availability impact). Explo...

CVE-2024-21084

CVE-2024-21084 affects Oracle BI Publisher (Oracle Analytics) in the Service Gateway component for versions 7.0.0.0.0 and 12.2.1.4.0. An unauthenticated attacker with network access via HTTP can read data from Oracle BI Publisher; attacks may impact related products (scope change). The descriptio...

CVE-2024-21083

CVE-2024-21083 affects Oracle Analytics, Oracle BI Publisher, Script Engine component. Affected versions: 7.0.0.0.0 and 12.2.1.4.0. The vulnerability allows a high-privilege attacker with network access over HTTP to compromise Oracle BI Publisher, potentially taking over the product. Sources cons...

CVE-2024-21081

Oracle E-Business Suite, Oracle Partner Management component Attribute Admin Setup (versions 12.2.3–12.2.13) remains vulnerable to CVE-2024-21081. The issue permits an unauthenticated attacker with network access via HTTP to compromise Oracle Partner Management, with human interaction required, p...

CVE-2024-21077

The connected documents confirm a vulnerability in Oracle E-Business Suite’s Oracle Trade Management, specifically the GL Accounts LOV component, affecting 12.2.3–12.2.13. An unauthenticated attacker with network access via HTTP can compromise Oracle Trade Management, potentially gaining unauthor...

CVE-2024-21075

CVE-2024-21075 affects Oracle E-Business Suite Oracle Trade Management, Claim Line LOV, versions 12.2.3–12.2.13. The issue allows unauthenticated, network-accessible (HTTP) compromise of Oracle Trade Management with potential unauthorized data access. CVSS v3.1 base score 7.5 (Confidentiality imp...

CVE-2024-21074

CVE-2024-21074 affects Oracle E-Business Suite, Oracle Trade Management (Finance LOV) with affected versions 12.2.3–12.2.13. The issue allows an unauthenticated attacker, over HTTP, to access Oracle Trade Management data due to insufficient input validation (root cause). Impact is unauthorized ac...

CVE-2024-21072

CVE-2024-21072 affects Oracle E-Business Suite Installed Base, Data Provider UI (versions 12.2.3–12.2.13). An unauthenticated attacker with network access via HTTP can compromise Oracle Installed Base; attacks require human interaction and may lead to unauthorized update/insert/delete and read ac...

CVE-2024-21070

CVE-2024-21070 affects Oracle PeopleSoft Enterprise PeopleTools, specifically the Search Framework in PeopleTools versions 8.59–8.61. The issue arises from insufficient input validation in the Search Framework, enabling an unauthenticated attacker with network access via HTTP to cause unauthorize...

CVE-2024-21071

CVE-2024-21071 affects Oracle E-Business Suite’s Oracle Workflow (Admin Screens and Grants UI) with affected versions 12.2.3–12.2.13. The vulnerability allows a high-privilege attacker with network access via HTTP to take over Oracle Workflow; the CVSS v3.1 base score is 9.1 (CRITICAL). Oracle’s ...

CVE-2024-21063

The CPT/PT Security report PT-2024-3531 documents a vulnerability in PeopleSoft Enterprise HCM Benefits Administration (version 9.2) due to insufficient input validation in the Benefits Administration component.An attacker with logon access and low privileges can exploit this (with user interacti...

CVE-2024-21064

The CVE-2024-21064 entry concerns Oracle Analytics’ Oracle Business Intelligence Enterprise Edition (OBIEE), specifically the Analytics Web Answers component. Affected versions include 7.0.0.0.0 and 12.2.1.4.0. The issue is described as built on insufficient access control in Analytics Web Answer...

CVE-2024-21062

Removed by vendor...

CVE-2024-21059

Summary for CVE-2024-21059 (Oracle Solaris) : A vulnerability in Oracle Solaris (11.x) affecting the Solaris Utility component. The advisory states the vulnerability allows a low-privileged, local attacker with logon to the host to compromise Oracle Solaris, and that successful exploitation can l...

CVE-2024-21057

Removed by vendor...

CVE-2024-21056

CVE-2024-21056 affects Oracle MySQL Server (Server: DML); supported versions 8.0.34 and prior are impacted. The vulnerability allows a high-privileged attacker with network access via multiple protocols to cause a hang or frequent, complete denial of service of MySQL Server. CVSS 3.1 base score 4...