Oracle E-Business Suite (January 2024 CPU)

The versions of Oracle E-Business Suite installed on the remote host are affected a vulnerability as referenced in the January 2024 CPU advisory. - Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: DB Privileges. Supported versions that are...

CVE-2024-20948

...

CVE-2024-20948

CVE-2024-20948 affects Oracle E-Business Suite, Oracle Knowledge Management (Setup, Admin) in versions 12.2.3–12.2.13. An unauthenticated, network-accessible attacker (HTTP) can exploit via Oracle Knowledge Management, with user interaction required, to perform unauthorized updates, inserts, dele...