CVE-2024-21188

https://notcve.org/view.php?id=CVE-2024-21188

16 Jul 2024 — Vulnerability in the Oracle Financial Services Revenue Management and Billing product of Oracle Financial Services Applications (component: Chatbot). Supported versions that are affected are 6.0.0.0.0 and 6.1.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Revenue Management and Billing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Financ... • https://www.oracle.com/security-alerts/cpujul2024.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •