Cyber Resilience

CVE-2024-21089

Oracle Concurrent Processing 12.2.3 – 12.2.13

Published
16 April 2024
Modified
06 December 2024
Patch / advisory
View advisory
CVSS Score v3.1 6.5
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS Score 0.0051 41th percentile
Risk Priority 51 floored blend · peak EPSS

Summary

CVE-2024-21089 is a medium-severity an unspecified weakness vulnerability in Oracle Concurrent Processing. Its CVSS base score is 6.5 (Medium).

Operationally, ranked at the 41th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Request Submission and Scheduling). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Concurrent Processing.…

more

Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Concurrent Processing accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).

CWE(s)
NVD-CWE-noinfo

Related Threats

CVEs Like This One

CVE-2025-61882Same product: Oracle Concurrent Processing
CVE-2026-46781Same vendor: Oracle
CVE-2026-60799Same vendor: Oracle
CVE-2024-21133Same vendor: Oracle
CVE-2026-21959Same vendor: Oracle
CVE-2023-22042Same vendor: Oracle
CVE-2026-35251Same vendor: Oracle
CVE-2026-21952Same vendor: Oracle
CVE-2024-21098Same vendor: Oracle
CVE-2024-21177Same vendor: Oracle

Affected Assets

oracle
concurrent processing
12.2.3 — 12.2.13

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References