CVE-2024-21072

CVE-2024-21072 affects Oracle E-Business Suite Installed Base, Data Provider UI (versions 12.2.3–12.2.13). An unauthenticated attacker with network access via HTTP can compromise Oracle Installed Base; attacks require human interaction and may lead to unauthorized update/insert/delete and read ac...

CVE-2024-21071

CVE-2024-21071 affects Oracle E-Business Suite’s Oracle Workflow (Admin Screens and Grants UI) with affected versions 12.2.3–12.2.13. The vulnerability allows a high-privilege attacker with network access via HTTP to take over Oracle Workflow; the CVSS v3.1 base score is 9.1 (CRITICAL). Oracle’s ...

CVE-2024-21048

CVE-2024-21048 affects Oracle E-Business Suite’s Oracle Web Applications Desktop Integrator (XML input) for versions 12.2.3–12.2.13. The root cause is insufficient input validation in the XML input component, enabling a low-privileged, network-accessible attacker over HTTP to read data from the a...

CVE-2024-21046

Oracle E-Business Suite, LOV component in Complex Maintenance, Repair, and Overhaul, is affected in versions 12.2.3–12.2.13. The issue arises from insufficient input validation in the LOV component, allowing unauthenticated access over HTTP to result in unauthorized update/insert/delete and read ...

CVE-2024-21045

CVE-2024-21045 affects Oracle E-Business Suite, specifically the LOV component in the Complex Maintenance, Repair, and Overhaul product. Affected: EBS versions 12.2.3–12.2.13. Root cause: insufficient input validation in LOV allows an unauthenticated attacker with network access via HTTP to compr...

CVE-2024-21044

CVE-2024-21044 affects Oracle E-Business Suite, specifically the Oracle Complex Maintenance, Repair, and Overhaul (LOV) component. Vulnerable versions are 12.2.3–12.2.13. The issue arises from insufficient input validation in the LOV, allowing an unauthenticated attacker with network access via H...

CVE-2024-21041

Oracle E-Business Suite CVE-2024-21041 affects the LOV component in Oracle Complex Maintenance, Repair, and Overhaul. Affected versions are 12.2.3–12.2.13. The issue arises from insufficient input validation, allowing an unauthenticated attacker with network access over HTTP to compromise data af...

CVE-2024-21042

The CVE-2024-21042 flaw affects Oracle E-Business Suite, specifically the Complex Maintenance, Repair, and Overhaul (LOV component). Affected versions are 12.2.3 through 12.2.13. The issue allows an unauthenticated attacker with network access over HTTP to compromise the LOV component, with attac...

CVE-2024-21043

Oracle E-Business Suite CMAO LOV component (versions 12.2.3–12.2.13) is affected by CVE-2024-21043. The issue allows an unauthenticated attacker with network access via HTTP to perform unauthorized read and write operations on accessible data, with successful attacks requiring user interaction an...

CVE-2024-21040

CVE-2024-21040 affects Oracle E-Business Suite, specifically the LOV component in Oracle Complex Maintenance, Repair, and Overhaul (12.2.3–12.2.13). The issue allows an unauthenticated attacker with network access over HTTP to read and modify data, with human interaction required for exploitation...

CVE-2024-21038

This CVE (CVE-2024-21038) affects Oracle E-Business Suite, specifically the Complex Maintenance, Repair, and Overhaul component (LOV). Affected versions are 12.2.3–12.2.13. The flaw enables an unauthenticated attacker with network access over HTTP to compromise the LOV component, with required us...

CVE-2024-21039

CVE-2024-21039 affects Oracle E-Business Suite, specifically the LOV component within Oracle Complex Maintenance, Repair, and Overhaul. Affected versions are 12.2.3–12.2.13. The issue arises from insufficient input validation in LOV, enabling an unauthenticated attacker with network access via HT...

CVE-2024-21037

CVE-2024-21037 concerns Oracle E-Business Suite, specifically the LOV component in Oracle Complex Maintenance, Repair, and Overhaul. Affected versions are 12.2.3–12.2.13. The issue allows an unauthenticated attacker with network access via HTTP to compromise the LOV, with attacks reportedly requi...

CVE-2024-21035

CVE-2024-21035 applies to Oracle E-Business Suite, specifically the Complex Maintenance, Repair, and Overhaul (LOV) component. Affected versions are 12.2.3–12.2.13. The issue stems from insufficient input validation in LOV, allowing an unauthenticated attacker with network access via HTTP to comp...

CVE-2024-21036

CVE-2024-21036 affects Oracle E-Business Suite, specifically the LOV component in Complex Maintenance, Repair, and Overhaul. Affected versions are 12.2.3–12.2.13. The issue stems from insufficient input validation in LOV, enabling an unauthenticated attacker with network access via HTTP to compro...

CVE-2024-21033

The CVE-2024-21033 issue affects Oracle E-Business Suite, specifically the Oracle Complex Maintenance, Repair, and Overhaul component LOV. Affected versions are 12.2.3–12.2.13. The root cause is insufficient input validation in LOV, enabling an unauthenticated attacker with network access via HTT...

CVE-2024-21034

CVE-2024-21034 affects Oracle E-Business Suite, specifically the Oracle Complex Maintenance, Repair, and Overhaul (LOV) component, with affected versions 12.2.3–12.2.13. An unauthenticated attacker with network access via HTTP can exploit this vulnerability, though human interaction is required. ...

CVE-2024-21032

CVE-2024-21032 affects Oracle E-Business Suite, specifically the LOV component within Complex Maintenance, Repair, and Overhaul. Affected versions are 12.2.3–12.2.13. The vulnerability can be exploited remotely over HTTP by an unauthenticated attacker; however, successful exploitation requires us...

CVE-2024-21031

The CVE-2024-21031 entry concerns Oracle E-Business Suite, Oracle Complex Maintenance, Repair, and Overhaul LOV component. Affected versions are 12.2.3–12.2.13. The issue allows an unauthenticated attacker with network access over HTTP to compromise data after user interaction, potentially enabli...

CVE-2024-21030

CVE-2024-21030 affects Oracle E-Business Suite, Oracle Complex Maintenance, Repair, and Overhaul (component: LOV). Affects 12.2.3–12.2.13; allows unauthenticated network access via HTTP to compromise data, with read and (in some cases) update/delete access. Exploitation is described as requiring ...