CVE-2024-21275: 
Oracle E-Business Suite vulnerability analysis and mitigation

Vulnerability in the Oracle Quoting product of Oracle E-Business Suite (component: User Interface) affects versions 12.2.7-12.2.13. This easily exploitable vulnerability allows low privileged attackers with network access via HTTP to compromise Oracle Quoting (Oracle Advisory).

The vulnerability has been assigned a CVSS 3.1 Base Score of 8.1 (High) with Confidentiality and Integrity impacts. The CVSS Vector is (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N), indicating network attack vector, low attack complexity, low privileges required, no user interaction needed, unchanged scope, and high impacts on confidentiality and integrity with no impact on availability (NVD).

Successful exploitation can result in unauthorized creation, deletion or modification access to critical data or all Oracle Quoting accessible data, as well as unauthorized access to critical data or complete access to all Oracle Quoting accessible data (Oracle Advisory).

Oracle has released patches to address this vulnerability as part of the October 2024 Critical Patch Update. Users are strongly advised to apply the security patches as soon as possible (Oracle Advisory).