Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://www.oracle.com/security-alerts/cpuapr2024.html |
History
No history.
MITRE
Status: PUBLISHED
Assigner: oracle
Published: 2024-04-16T21:26:35.292Z
Updated: 2024-08-01T22:13:42.681Z
Reserved: 2023-12-07T22:28:10.677Z
Link: CVE-2024-21109
Vulnrichment
Updated: 2024-08-01T22:13:42.681Z
NVD
Status : Awaiting Analysis
Published: 2024-04-16T22:15:32.440
Modified: 2024-04-17T12:48:07.510
Link: CVE-2024-21109
Redhat
No data.