Analysis Summary

CVE-2024-21183 CVSS:7.5

An unspecified vulnerability in Oracle WebLogic Server related to the Core component could allow a remote attacker to cause high confidentiality impact.

CVE-2024-21175 CVSS:7.5

An unspecified vulnerability in Oracle WebLogic Server related to the Core component could allow a remote attacker to cause high integrity impact.

CVE-2024-21182 CVSS:7.5

An unspecified vulnerability in Oracle WebLogic Server related to the Core component could allow a remote attacker to cause high confidentiality impact.

CVE-2024-21181 CVSS:9.8

An unspecified vulnerability in Oracle WebLogic Server related to the Core component could allow a remote attacker to cause high confidentiality, integrity and availability impact.

CVE-2024-21152 CVSS:8.1

An unspecified vulnerability in Oracle Process Manufacturing Financials related to the Allocation Rules component could allow a remote authenticated attacker to cause high confidentiality and high integrity impacts.

CVE-2024-21149 CVSS:8.1

An unspecified vulnerability in Oracle Enterprise Asset Management related to the Work Definition Issues component could allow a remote authenticated attacker to cause high confidentiality and high integrity impacts.

CVE-2024-21146 CVSS:8.1

An unspecified vulnerability in Oracle Trade Management related to the GL Accounts component could allow a remote authenticated attacker to cause high confidentiality and high integrity impacts.

CVE-2024-21153 CVSS:8.1

An unspecified vulnerability in Oracle Process Manufacturing Product Development related to the Quality Management Specs component could allow a remote authenticated attacker to cause high confidentiality and high integrity impacts.

CVE-2024-21167 CVSS:8.1

An unspecified vulnerability in Oracle Trading Community related to the Party Search UI component could allow a remote authenticated attacker to cause high confidentiality and high integrity impacts.

CVE-2024-21184 CVSS:7.2

An unspecified vulnerability in Oracle Database Server related to the Oracle Database RDBMS Security component could allow a remote authenticated attacker to cause high confidentiality, high integrity and high availability impacts.

Impact

• Gain Access

Indicators of Compromise

CVE

• CVE-2024-21183
• CVE-2024-21175
• CVE-2024-21182
• CVE-2024-21181
• CVE-2024-21152
• CVE-2024-21149
• CVE-2024-21146
• CVE-2024-21153
• CVE-2024-21167
• CVE-2024-21184

Affected Vendors

Remediation

Refer to Oracle Critical Patch Update Advisory for patch, upgrade or suggested workaround information.

Oracle Critical Patch Update Advisory