CVE-2024-21033

The CVE-2024-21033 issue affects Oracle E-Business Suite, specifically the Oracle Complex Maintenance, Repair, and Overhaul component LOV. Affected versions are 12.2.3–12.2.13. The root cause is insufficient input validation in LOV, enabling an unauthenticated attacker with network access via HTT...

CVE-2024-21034

CVE-2024-21034 affects Oracle E-Business Suite, specifically the Oracle Complex Maintenance, Repair, and Overhaul (LOV) component, with affected versions 12.2.3–12.2.13. An unauthenticated attacker with network access via HTTP can exploit this vulnerability, though human interaction is required. ...

CVE-2024-21032

CVE-2024-21032 affects Oracle E-Business Suite, specifically the LOV component within Complex Maintenance, Repair, and Overhaul. Affected versions are 12.2.3–12.2.13. The vulnerability can be exploited remotely over HTTP by an unauthenticated attacker; however, successful exploitation requires us...

CVE-2024-21031

The CVE-2024-21031 entry concerns Oracle E-Business Suite, Oracle Complex Maintenance, Repair, and Overhaul LOV component. Affected versions are 12.2.3–12.2.13. The issue allows an unauthenticated attacker with network access over HTTP to compromise data after user interaction, potentially enabli...

CVE-2024-21030

CVE-2024-21030 affects Oracle E-Business Suite, Oracle Complex Maintenance, Repair, and Overhaul (component: LOV). Affects 12.2.3–12.2.13; allows unauthenticated network access via HTTP to compromise data, with read and (in some cases) update/delete access. Exploitation is described as requiring ...

CVE-2024-21029

Summary: CVE-2024-21029 affects Oracle E-Business Suite, Oracle Complex Maintenance, Repair, and Overhaul (LOV) in versions 12.2.3–12.2.13. It is an unauthenticated network-access vulnerability over HTTP that requires user interaction and can lead to unauthorized read/update/delete of data, with ...

CVE-2024-21027

Oracle E-Business Suite: The CVE-2024-21027 vulnerability affects the LOV component in the Complex Maintenance, Repair, and Overhaul module for versions 12.2.3–12.2.13. Root cause is insufficient input validation in the LOV, enabling a remote, unauthenticated attacker to access data via HTTP with...

CVE-2024-21024

CVE-2024-21024 affects Oracle E-Business Suite, specifically the LOV component in Oracle Complex Maintenance, Repair, and Overhaul. Affected versions are 12.2.3–12.2.13. The issue stems from insufficient input validation in LOV, allowing a remote, unauthenticated attacker with network access via ...

CVE-2024-21026

CVE-2024-21026 affects Oracle E-Business Suite, LOV component, in versions 12.2.3–12.2.13. The issue stems from insufficient input validation in LOV, allowing an unauthenticated attacker with network access via HTTP to compromise data; attacks require user interaction. Impact includes unauthorize...

CVE-2024-21021

CVE-2024-21021 affects Oracle E-Business Suite, specifically the LOV component in the Complex Maintenance, Repair, and Overhaul module. Affected versions are 12.2.3–12.2.13. The vulnerability is exploitable over HTTP by an unauthenticated attacker and, though it requires user interaction, can lea...

CVE-2024-21023

The CVE-2024-21023 issue affects Oracle E-Business Suite - Complex Maintenance, Repair, and Overhaul (LOV component) on versions 12.2.3–12.2.13. Root cause: insufficient input validation in the LOV, enabling unauthenticated, network-accessible HTTP exploitation. Impact: unauthorized update/insert...

CVE-2024-21022

CVE-2024-21022 affects Oracle E-Business Suite, specifically the Oracle Complex Maintenance, Repair, and Overhaul component (LOV). Affected versions are 12.2.3–12.2.13. The root cause is insufficient input validation in LOV, leading to an unauthenticated attacker with network access via HTTP bein...

CVE-2024-21020

CVE-2024-21020 affects Oracle E-Business Suite, specifically the Complex Maintenance, Repair, and Overhaul (LOV) component. Affected are versions 12.2.3–12.2.13. The vulnerability allows an unauthenticated, network-based attacker (HTTP) to manipulate data and potentially read sensitive data, with...

CVE-2024-21018

CVE-2024-21018 affects Oracle E-Business Suite, specifically the Oracle Complex Maintenance, Repair, and Overhaul (LOV) component. Affected versions are 12.2.3–12.2.13. The issue allows an unauthenticated attacker with network access via HTTP, with required human interaction, to compromise LOV an...

CVE-2024-21017

CVE-2024-21017 affects Oracle E-Business Suite, specifically the LOV component within Oracle Complex Maintenance, Repair, and Overhaul. Publicly confirmed versions affected are 12.2.3–12.2.13. The vulnerability allows an unauthenticated attacker with network access over HTTP to compromise the pro...

PT-2024-4888 · Oracle · Oracle E-Business Suite

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.2.3 through 12.2.13 Description: The issue is related to insufficient input validation in the LOV component of Oracle Complex Maintenance, Repair, and Overhaul. This allows an unauthenticated attacker with...

PT-2024-3440 · Oracle · Oracle Complex Maintenance

Name of the Vulnerable Software and Affected Versions: Oracle Complex Maintenance, Repair, and Overhaul versions 12.2.3 through 12.2.13 Description: The issue is related to insufficient input validation in the LOV component of Oracle Complex Maintenance, Repair, and Overhaul, allowing an...

PT-2024-3437 · Oracle · Oracle E-Business Suite

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.2.3 through 12.2.13 Description: The issue is related to insufficient input validation in the LOV component of Oracle Complex Maintenance, Repair, and Overhaul. This easily exploitable vulnerability allows ...

PT-2024-3439 · Oracle · Oracle E-Business Suite +1

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.2.3 through 12.2.13 Description: The issue is related to insufficient input validation in the LOV component of the Oracle Complex Maintenance, Repair, and Overhaul product. This allows an unauthenticated...

PT-2024-4882 · Oracle · Oracle Complex Maintenance

Name of the Vulnerable Software and Affected Versions: Oracle Complex Maintenance, Repair, and Overhaul versions 12.2.3 through 12.2.13 Description: The issue is related to insufficient input validation in the LOV component of Oracle Complex Maintenance, Repair, and Overhaul, allowing an...