CVE-2024-21024

Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite component: LOV. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2024-21023

Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite component: LOV. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2024-21020

Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite component: LOV. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2024-21017

Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite component: LOV. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2024-21016

Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite component: LOV. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2024-21018

Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite component: LOV. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2024-21019

Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite component: LOV. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2024-20990

Vulnerability in the Oracle Applications Technology product of Oracle E-Business Suite component: Templates. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications...

CVE-2024-21088

CVE-2024-21088 affects Oracle E-Business Suite, specifically the Oracle Production Scheduling Import Utility. Affected versions are 12.2.4–12.2.12. The issue allows unauthenticated, network-accessible exploitation via HTTP to modify, delete, or create data in Oracle Production Scheduling due to i...

CVE-2024-21089

Oracle E-Business Suite vulnerability CVE-2024-21089 affects Oracle Concurrent Processing, specifically the Request Submission and Scheduling component in versions 12.2.3–12.2.13. The issue stems from insufficient input validation, allowing a low-privileged, network-accessing attacker over HTTP t...

CVE-2024-21086

CVE-2024-21086 is a vulnerability in Oracle E-Business Suite's Oracle CRM Technical Foundation (Preferences) . Affected versions are 12.2.3–12.2.13 . The issue is exploitable by an unauthenticated attacker over HTTP and requires human interaction, potentially allowing an adversary to perform unau...

CVE-2024-21080

CVE-2024-21080: In Oracle E-Business Suite, the Oracle Applications Framework REST Services have a vulnerability due to insufficient input validation. Affects 12.2.9–12.2.13; an attacker with network access over HTTP and low privileges can potentially access confidential data or data within the R...

CVE-2024-21081

Oracle E-Business Suite, Oracle Partner Management component Attribute Admin Setup (versions 12.2.3–12.2.13) remains vulnerable to CVE-2024-21081. The issue permits an unauthenticated attacker with network access via HTTP to compromise Oracle Partner Management, with human interaction required, p...

CVE-2024-21079

Oracle E-Business Suite, Oracle Marketing component Campaign LOV, is vulnerable for versions 12.2.3–12.2.13 due to insufficient input validation. An unauthenticated attacker with network access via HTTP can compromise Oracle Marketing and potentially access all data exposed by Oracle Marketing. T...

CVE-2024-21078

CVE-2024-21078 affects Oracle E-Business Suite’s Oracle Marketing Campaign LOV component (versions 12.2.3–12.2.13). Affected due to insufficient input validation in Campaign LOV, enabling a remote, unauthenticated attacker with network access via HTTP to access protected data. This aligns with a ...

CVE-2024-21076

Oracle E-Business Suite — Oracle Trade Management (Offer LOV) is affected in 12.2.3–12.2.13 due to insufficient input validation. An unauthenticated, network-access attacker can exploit via HTTP to gain unauthorized access to Oracle Trade Management data. The issue is described in external adviso...

CVE-2024-21077

The connected documents confirm a vulnerability in Oracle E-Business Suite’s Oracle Trade Management, specifically the GL Accounts LOV component, affecting 12.2.3–12.2.13. An unauthenticated attacker with network access via HTTP can compromise Oracle Trade Management, potentially gaining unauthor...

CVE-2024-21075

CVE-2024-21075 affects Oracle E-Business Suite Oracle Trade Management, Claim Line LOV, versions 12.2.3–12.2.13. The issue allows unauthenticated, network-accessible (HTTP) compromise of Oracle Trade Management with potential unauthorized data access. CVSS v3.1 base score 7.5 (Confidentiality imp...

CVE-2024-21073

CVE-2024-21073 affects Oracle E-Business Suite Oracle Trade Management, component Claim LOV. The issue arises from insufficient input validation in Claim LOV, allowing unauthenticated remote attacker over HTTP to access or compromise Oracle Trade Management, with impact on data confidentiality (p...

CVE-2024-21074

CVE-2024-21074 affects Oracle E-Business Suite, Oracle Trade Management (Finance LOV) with affected versions 12.2.3–12.2.13. The issue allows an unauthenticated attacker, over HTTP, to access Oracle Trade Management data due to insufficient input validation (root cause). Impact is unauthorized ac...