CVE-2024-21100

MEDIUM Year: 2024
CVSS v3 Score
4.0
Medium
Weakness Type
NVD-CWE-Other
View all →

Vulnerability Description

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Platform). Supported versions that are affected are 11.3.0, 11.3.1 and 11.3.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Platform. While the vulnerability is in Oracle Commerce Platform, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Commerce Platform accessible data. CVSS 3.1 Base Score 4.0 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N).

Related Vulnerabilities

CVE-2014-3477

MEDIUM
CVSS:4.0(Medium)

The dbus-daemon in D-Bus 1.2.x through 1.4.x, 1.6.x before 1.6.20, and 1.8.x before 1.8.4, sends an AccessDenied error to the service instead of a client when the client is prohibited from accessing t...

NVD-CWE-Other2014

CVE-2015-7403

MEDIUM
CVSS:4.0(Medium)

IBM Spectrum Scale 4.1.1.x before 4.1.1.3 and General Parallel File System (GPFS) 3.5.x before 3.5.0.29 and 4.1.x through 4.1.0.8 on AIX allow local users to cause a denial of service (incorrect point...

NVD-CWE-Other2015

CVE-2017-10033

MEDIUM
CVSS:4.0(Medium)

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Support Tools). Supported versions that are affected are 11.1.1.8.0 and 12.2.1.2.0. Difficult to exploi...

NVD-CWE-Other2017

CVE-2017-10213

MEDIUM
CVSS:4.0(Medium)

Vulnerability in the Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect). The supported version that is affected is 8.10.x. Easily exploitable vulnerability allo...

NVD-CWE-Other2017

CVE-2017-10220

MEDIUM
CVSS:4.0(Medium)

Vulnerability in the Hospitality Property Interfaces component of Oracle Hospitality Applications (subcomponent: Parser). The supported version that is affected is 8.10.x. Easily exploitable vulnerabi...

NVD-CWE-Other2017

CVE-2017-10295

MEDIUM
CVSS:4.0(Medium)

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Emb...

NVD-CWE-Other2017