CVE-2024-20990
Assigner: oracle
Published: 2024-04-16T21:25:43.289Z
State: PUBLISHED
problemTypes: descriptions: description: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Technology.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Applications Technology accessible data.
affected: vendor: Oracle Corporation
product: E-Business Suite Technology Stack
cpes: cpe:2.3:a:oracle:e-business_suite_technology_stack:12.2.3-12.2.13:*:*:*:*:*:*:*
versions: version: 12.2.3
status: affected
lessThanOrEqual: 12.2.13
versionType: custom
descriptions: value: Vulnerability in the Oracle Applications Technology product of Oracle E-Business Suite (component: Templates).  Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Technology.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Applications Technology accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).
metrics: cvssV3_1: attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: NONE
availabilityImpact: NONE
version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
baseScore: 5.3
baseSeverity: MEDIUM