Medium severity4.3NVD Advisory· Published Oct 15, 2024· Updated Jun 17, 2026
CVE-2024-21206
CVE-2024-21206
Description
Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Diagnostics). Supported versions that are affected are ECC:11-13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise Command Center Framework. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Enterprise Command Center Framework accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).
Affected products
4- Range: ECC:11-13
ECC:11-13+ 2 more
- (no CPE)range: ECC:11-13
- cpe:2.3:a:oracle:enterprise_command_center_framework:11-13:*:*:*:*:*:*:*range: ECC:11
- cpe:2.3:a:oracle:enterprise_command_center_framework:*:*:*:*:*:*:*:*range: >=11,<=13
Patches
Vulnerability mechanics
References
1- www.oracle.com/security-alerts/cpuoct2024.htmlnvdVendor Advisory
News mentions
0No linked articles in our index yet.