Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: XML input). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Web Applications Desktop Integrator accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).
References
| Link | Resource |
|---|---|
| https://www.oracle.com/security-alerts/cpuapr2024.html | Vendor Advisory |
| https://www.oracle.com/security-alerts/cpuapr2024.html | Vendor Advisory |
Configurations
History
19 Mar 2025, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-611 |
06 Dec 2024, 19:46
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.oracle.com/security-alerts/cpuapr2024.html - Vendor Advisory | |
| CWE | NVD-CWE-noinfo | |
| CPE | cpe:2.3:a:oracle:web_applications_desktop_integrator:*:*:*:*:*:*:*:* | |
| First Time |
Oracle
Oracle web Applications Desktop Integrator |
21 Nov 2024, 08:53
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
|
| References | () https://www.oracle.com/security-alerts/cpuapr2024.html - |
16 Apr 2024, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-04-16 22:15
Updated : 2025-03-19 18:15
NVD link : CVE-2024-21048
Mitre link : CVE-2024-21048
CVE.ORG link : CVE-2024-21048
JSON object : View
Products Affected
oracle
- web_applications_desktop_integrator
CWE