CVE Feed

    Dashboard / CVE / CVE-2024-21192

    CVE-2024-21192

    Vulnerability in the Oracle Enterprise Manager for Fusion Middleware product of Oracle Fusion Middleware (component: WebLogic Mgmt). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Enterprise Manager for Fusion Middleware executes to compromise Oracle Enterprise Manager for Fusion Middleware. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Enterprise Manager for Fusion Middleware accessible data. CVSS 3.1 Base Score 4.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N).

    Published:Oct 15, 2024
    Last Modified:Oct 18, 2024
    EPS:Oct 15, 2024
    EPSS Score:0.00051
    CVSS Score:4.4

    Affected Products

    Vendor
    Oracle
    Product
    Enterprise Manager For Fusion Middleware
    Vendor
    Oracle
    Product
    Fusion Middleware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2020-2614 (CVSS 6) — Vulnerability in the Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager (component:…
    CVE-2019-0227 (CVSS 7.5) — A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last rel…
    CVE-2018-8032 (CVSS 6.1) — Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default se…
    CVE-2018-1000613 (CVSS 9.8) — Legion of the Bouncy Castle Legion of the Bouncy Castle Java Cryptography APIs 1.58 up to but not including 1.…
    CVE-2017-5645 (CVSS 9.8) — In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized …
    CVE-2016-3496 (CVSS 4.7) — Unspecified vulnerability in the Enterprise Manager for Fusion Middleware component in Oracle Enterprise Manag…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High