CVE-2024-21054

Removed by vendor...

CVE-2024-21054

CVE-2024-21054 affects Oracle MySQL Server, specifically the Server: Optimizer component. Affected versions are 8.0.36 and prior and 8.3.0 and prior. The vulnerability is exploitable over the network by a high-privilege attacker and can cause a hang or crash (complete DOS) of MySQL Server, with C...

CVE-2024-21052

CVE-2024-21052 affects Oracle MySQL Server (component: Server: DML). Affected: MySQL 8.0.34 and prior. The vulnerability could be exploited by a highly privileged attacker with network access via multiple protocols to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVS...

CVE-2024-21051

Removed by vendor...

CVE-2024-21050

Removed by vendor...

CVE-2024-21049

CVE-2024-21049 affects Oracle MySQL Server (Server: DML). Affected: MySQL Server 8.0.34 and earlier. Attackers with network access via multiple protocols and with high privileges can cause a hang or frequent crash (DoS). Public details in connected docs confirm the vulnerability class and impact;...

CVE-2024-21048

CVE-2024-21048 affects Oracle E-Business Suite’s Oracle Web Applications Desktop Integrator (XML input) for versions 12.2.3–12.2.13. The root cause is insufficient input validation in the XML input component, enabling a low-privileged, network-accessible attacker over HTTP to read data from the a...

CVE-2024-21049

Removed by vendor...

CVE-2024-21042

The CVE-2024-21042 flaw affects Oracle E-Business Suite, specifically the Complex Maintenance, Repair, and Overhaul (LOV component). Affected versions are 12.2.3 through 12.2.13. The issue allows an unauthenticated attacker with network access over HTTP to compromise the LOV component, with attac...

CVE-2024-21043

Oracle E-Business Suite CMAO LOV component (versions 12.2.3–12.2.13) is affected by CVE-2024-21043. The issue allows an unauthenticated attacker with network access via HTTP to perform unauthorized read and write operations on accessible data, with successful attacks requiring user interaction an...

CVE-2024-21038

This CVE (CVE-2024-21038) affects Oracle E-Business Suite, specifically the Complex Maintenance, Repair, and Overhaul component (LOV). Affected versions are 12.2.3–12.2.13. The flaw enables an unauthenticated attacker with network access over HTTP to compromise the LOV component, with required us...

CVE-2024-21039

CVE-2024-21039 affects Oracle E-Business Suite, specifically the LOV component within Oracle Complex Maintenance, Repair, and Overhaul. Affected versions are 12.2.3–12.2.13. The issue arises from insufficient input validation in LOV, enabling an unauthenticated attacker with network access via HT...

CVE-2024-21037

CVE-2024-21037 concerns Oracle E-Business Suite, specifically the LOV component in Oracle Complex Maintenance, Repair, and Overhaul. Affected versions are 12.2.3–12.2.13. The issue allows an unauthenticated attacker with network access via HTTP to compromise the LOV, with attacks reportedly requi...

CVE-2024-21035

CVE-2024-21035 applies to Oracle E-Business Suite, specifically the Complex Maintenance, Repair, and Overhaul (LOV) component. Affected versions are 12.2.3–12.2.13. The issue stems from insufficient input validation in LOV, allowing an unauthenticated attacker with network access via HTTP to comp...

CVE-2024-21036

CVE-2024-21036 affects Oracle E-Business Suite, specifically the LOV component in Complex Maintenance, Repair, and Overhaul. Affected versions are 12.2.3–12.2.13. The issue stems from insufficient input validation in LOV, enabling an unauthenticated attacker with network access via HTTP to compro...

CVE-2024-21033

The CVE-2024-21033 issue affects Oracle E-Business Suite, specifically the Oracle Complex Maintenance, Repair, and Overhaul component LOV. Affected versions are 12.2.3–12.2.13. The root cause is insufficient input validation in LOV, enabling an unauthenticated attacker with network access via HTT...

CVE-2024-21034

CVE-2024-21034 affects Oracle E-Business Suite, specifically the Oracle Complex Maintenance, Repair, and Overhaul (LOV) component, with affected versions 12.2.3–12.2.13. An unauthenticated attacker with network access via HTTP can exploit this vulnerability, though human interaction is required. ...

CVE-2024-21032

CVE-2024-21032 affects Oracle E-Business Suite, specifically the LOV component within Complex Maintenance, Repair, and Overhaul. Affected versions are 12.2.3–12.2.13. The vulnerability can be exploited remotely over HTTP by an unauthenticated attacker; however, successful exploitation requires us...

CVE-2024-21031

The CVE-2024-21031 entry concerns Oracle E-Business Suite, Oracle Complex Maintenance, Repair, and Overhaul LOV component. Affected versions are 12.2.3–12.2.13. The issue allows an unauthenticated attacker with network access over HTTP to compromise data after user interaction, potentially enabli...

CVE-2024-21030

CVE-2024-21030 affects Oracle E-Business Suite, Oracle Complex Maintenance, Repair, and Overhaul (component: LOV). Affects 12.2.3–12.2.13; allows unauthenticated network access via HTTP to compromise data, with read and (in some cases) update/delete access. Exploitation is described as requiring ...