High NCSC-2024-0295 10 CVEs

Kwetsbaarheden verholpen in Oracle E-Business Suite

Published Jul 17, 2024 · Updated Jul 17, 2024 · nl

Vendor: Oracle Product: Application Object Library Product: Application Testing Suite Product: Applications Framework Product: communications_cloud_native_core_automated_test_suite Product: Enterprise Asset Management Product: iStore Product: Marketing Product: Process Manufacturing Financials Product: Process Manufacturing Product Development Product: Purchasing Product: Trade Management Product: Trading Community

Summary

Er zijn kwetsbaarheden verholpen in Oracle E-Business Suite.

Details

Interpretaties
Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de volgende categorieën schade:

* Toegang tot gevoelige gegevens
* Toegang tot systeemgegevens
* Manipulatie van gegevens

Oplossingen
Oracle heeft updates beschikbaar gesteld om de kwetsbaarheden te verhelpen. Zie de referenties voor meer informatie.

Vulnerabilities 10

High 8.1

CVE-2024-21146

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: GL Accounts). Supported ver…

Oracle Trade Management

Jul 16, 2024
High 8.1

CVE-2024-21149

Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (component: Work Definition …

Oracle Enterprise Asset Management

Jul 16, 2024
High 8.1

CVE-2024-21152

Vulnerability in the Oracle Process Manufacturing Financials product of Oracle E-Business Suite (component: Allocation …

Oracle Process Manufacturing Financials

Jul 16, 2024
High 8.1

CVE-2024-21153

Vulnerability in the Oracle Process Manufacturing Product Development product of Oracle E-Business Suite (component: Qu…

Oracle Process Manufacturing Product Development

Jul 16, 2024
High 8.1

CVE-2024-21167

Vulnerability in the Oracle Trading Community product of Oracle E-Business Suite (component: Party Search UI). Supporte…

Oracle Trading Community

Jul 16, 2024
Medium 6.5

CVE-2024-21169

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Partners). Supported versions that…

Oracle Marketing

Jul 16, 2024
Medium 5.4

CVE-2024-21128

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: APIs). Supported …

Oracle Application Object Library

Jul 16, 2024
Medium 5.4

CVE-2024-21132

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Approvals). Supported versions th…

Oracle Purchasing

Jul 16, 2024
Medium 5.3

CVE-2024-21143

Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: User Management). Supported versions …

Oracle iStore

Jul 16, 2024
Medium 4.8

CVE-2024-21148

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Sup…

Oracle Applications Framework

Jul 16, 2024

Revision history

2024-07-17 #0
Initiele versie

References

Source - nvd
https://nvd.nist.gov/vuln/detail/CVE-2024-21128
Source - nvd
https://nvd.nist.gov/vuln/detail/CVE-2024-21132
Source - nvd
https://nvd.nist.gov/vuln/detail/CVE-2024-21143
Source - nvd
https://nvd.nist.gov/vuln/detail/CVE-2024-21146
Source - nvd
https://nvd.nist.gov/vuln/detail/CVE-2024-21148
Source - nvd
https://nvd.nist.gov/vuln/detail/CVE-2024-21149
Source - nvd
https://nvd.nist.gov/vuln/detail/CVE-2024-21152
Source - nvd
https://nvd.nist.gov/vuln/detail/CVE-2024-21153
Source - nvd
https://nvd.nist.gov/vuln/detail/CVE-2024-21167
Source - nvd
https://nvd.nist.gov/vuln/detail/CVE-2024-21169
Reference - cveprojectv5; ibm; nvd; oracle
https://www.oracle.com/security-alerts/cpujul2024.html