CVE-2024-21206

4.3 mediumEPSS 0.4%

Medium (4.3) in oracle enterprise command center framework. EPSS 0.4% chance of exploitation in the next 30 days.

Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Diagnostics). Supported versions that are affected are ECC:11-13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise Command Center Framework. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Enterprise Command Center Framework accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 38% of CVEs (scores of 2026-10-31)
CWE: CWE-203
Published: 2024-10-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

oracle:enterprise_command_center_framework

References

https://www.oracle.com/security-alerts/cpuoct2024.html

Check your stack JSON