How severe is CVE-2024-21180?

This vulnerability has a severity rating of MEDIUM with a CVSS score of 4.1 out of 10.

What type of vulnerability is CVE-2024-21180?

This is classified as NVD-CWE-Other, which is a common weakness in software security.

CVE-2024-21180 - MEDIUM Severity | CVSS 4.1

Vulnerability Description

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: OpenSearch Dashboards). Supported versions that are affected are 8.59, 8.60 and 8.61. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 4.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N).

Related Vulnerabilities

CVE-2016-0668

MEDIUM

CVSS:4.1(Medium)

Unspecified vulnerability in Oracle MySQL 5.6.28 and earlier and 5.7.10 and earlier and MariaDB 10.0.x before 10.0.24 and 10.1.x before 10.1.12 allows local users to affect availability via vectors re...

NVD-CWE-Other2016

CVE-2016-5463

MEDIUM

CVSS:4.1(Medium)

Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect integrity via vectors related t...

NVD-CWE-Other2016

CVE-2016-5464

MEDIUM

CVSS:4.1(Medium)

NVD-CWE-Other2016

CVE-2016-5559

MEDIUM

CVSS:4.1(Medium)

Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows local users to affect integrity via vectors related to Kernel.

NVD-CWE-Other2016

CVE-2017-10268

MEDIUM

CVSS:4.1(Medium)

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.5.57 and earlier, 5.6.37 and earlier and 5.7.19 and earlier....

NVD-CWE-Other2017

CVE-2018-2773

MEDIUM

CVSS:4.1(Medium)

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Difficult...

NVD-CWE-Other2018