# Vulnerabilities published in 2024


- [CVE-2024-21071](https://insights.sbomify.com/CVE-2024-21071/): Missing authorization in Workflow (critical 9.1)
- [CVE-2024-21070](https://insights.sbomify.com/CVE-2024-21070/): Other in PeopleSoft Enterprise PT PeopleTools (medium 5.4)
- [CVE-2024-2107](https://insights.sbomify.com/CVE-2024-2107/): Blossom Spa <= 1.3.3 - Sensitive Information Exposure (medium 5.8)
- [CVE-2024-21069](https://insights.sbomify.com/CVE-2024-21069/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-21068](https://insights.sbomify.com/CVE-2024-21068/): Other in Java SE JDK and JRE (low 3.7)
- [CVE-2024-21067](https://insights.sbomify.com/CVE-2024-21067/): Missing authorization in Enterprise Manager Base Platform (high 8.8)
- [CVE-2024-21066](https://insights.sbomify.com/CVE-2024-21066/): Cross-site scripting in Database - Enterprise Edition (medium 4.2)
- [CVE-2024-21065](https://insights.sbomify.com/CVE-2024-21065/): Open redirect in PeopleSoft Enterprise PT PeopleTools (medium 6.1)
- [CVE-2024-21064](https://insights.sbomify.com/CVE-2024-21064/): Information disclosure in Business Intelligence Enterprise Edition (medium 5.4)
- [CVE-2024-21063](https://insights.sbomify.com/CVE-2024-21063/): Misconfiguration in PeopleSoft Enterprise HCM Benefits Administration (medium 6.1)
- [CVE-2024-21062](https://insights.sbomify.com/CVE-2024-21062/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-21061](https://insights.sbomify.com/CVE-2024-21061/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-21060](https://insights.sbomify.com/CVE-2024-21060/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-2106](https://insights.sbomify.com/CVE-2024-2106/): Information disclosure in MasterStudy LMS WordPress Plugin – for Online Courses and Education (medium 5.3)
- [CVE-2024-21059](https://insights.sbomify.com/CVE-2024-21059/): Privilege escalation in Solaris Operating System (high 7.8)
- [CVE-2024-21058](https://insights.sbomify.com/CVE-2024-21058/): Other in Database - Enterprise Edition (medium 4.9)
- [CVE-2024-21057](https://insights.sbomify.com/CVE-2024-21057/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-21056](https://insights.sbomify.com/CVE-2024-21056/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-21055](https://insights.sbomify.com/CVE-2024-21055/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-21054](https://insights.sbomify.com/CVE-2024-21054/): Memory corruption in MySQL Server (medium 4.9)
- [CVE-2024-21053](https://insights.sbomify.com/CVE-2024-21053/): Memory corruption in MySQL Server (medium 4.9)
- [CVE-2024-21052](https://insights.sbomify.com/CVE-2024-21052/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-21051](https://insights.sbomify.com/CVE-2024-21051/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-21050](https://insights.sbomify.com/CVE-2024-21050/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-2105](https://insights.sbomify.com/CVE-2024-2105/): JBL: Improper validation of ICM field in connection requests (medium 6.5)
- [CVE-2024-21049](https://insights.sbomify.com/CVE-2024-21049/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-21048](https://insights.sbomify.com/CVE-2024-21048/): XML external entity in Web Applications Desktop Integrator (medium 4.3)
- [CVE-2024-21047](https://insights.sbomify.com/CVE-2024-21047/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-21046](https://insights.sbomify.com/CVE-2024-21046/): Cross-site scripting in Complex Maintenance, Repair, and Overhaul (medium 6.1)
- [CVE-2024-21045](https://insights.sbomify.com/CVE-2024-21045/): Cross-site scripting in Complex Maintenance, Repair, and Overhaul (medium 6.1)
- [CVE-2024-21044](https://insights.sbomify.com/CVE-2024-21044/): Cross-site request forgery in Complex Maintenance, Repair, and Overhaul (medium 6.1)
- [CVE-2024-21043](https://insights.sbomify.com/CVE-2024-21043/): Cross-site request forgery in Complex Maintenance, Repair, and Overhaul (medium 6.1)
- [CVE-2024-21042](https://insights.sbomify.com/CVE-2024-21042/): Cross-site scripting in Complex Maintenance, Repair, and Overhaul (medium 6.1)
- [CVE-2024-21041](https://insights.sbomify.com/CVE-2024-21041/): Cross-site scripting in Complex Maintenance, Repair, and Overhaul (medium 6.1)
- [CVE-2024-21040](https://insights.sbomify.com/CVE-2024-21040/): Information disclosure in Complex Maintenance, Repair, and Overhaul (medium 6.1)
- [CVE-2024-2104](https://insights.sbomify.com/CVE-2024-2104/): JBL: Improper BLE security configurations and lack of authentication on the device's GATT server (high 8.8)
- [CVE-2024-21039](https://insights.sbomify.com/CVE-2024-21039/): Missing authorization in Complex Maintenance, Repair, and Overhaul (medium 6.1)
- [CVE-2024-21038](https://insights.sbomify.com/CVE-2024-21038/): Cross-site scripting in Complex Maintenance, Repair, and Overhaul (medium 6.1)
- [CVE-2024-21037](https://insights.sbomify.com/CVE-2024-21037/): Cross-site scripting in Complex Maintenance, Repair, and Overhaul (medium 6.1)
- [CVE-2024-21036](https://insights.sbomify.com/CVE-2024-21036/): Cross-site scripting in Complex Maintenance, Repair, and Overhaul (medium 6.1)
- [CVE-2024-21035](https://insights.sbomify.com/CVE-2024-21035/): Missing authorization in Complex Maintenance, Repair, and Overhaul (medium 6.1)
- [CVE-2024-21034](https://insights.sbomify.com/CVE-2024-21034/): Privilege escalation in Complex Maintenance, Repair, and Overhaul (medium 6.1)
- [CVE-2024-21033](https://insights.sbomify.com/CVE-2024-21033/): Cross-site scripting in Complex Maintenance, Repair, and Overhaul (medium 6.1)
- [CVE-2024-21032](https://insights.sbomify.com/CVE-2024-21032/): Cross-site request forgery in Complex Maintenance, Repair, and Overhaul (medium 6.1)
- [CVE-2024-21031](https://insights.sbomify.com/CVE-2024-21031/): Missing authorization in Complex Maintenance, Repair, and Overhaul (medium 6.1)
- [CVE-2024-21030](https://insights.sbomify.com/CVE-2024-21030/): Memory corruption in Complex Maintenance, Repair, and Overhaul (medium 6.1)
- [CVE-2024-2103](https://insights.sbomify.com/CVE-2024-2103/): Inclusion of Undocumented Features (medium 6.5)
- [CVE-2024-21029](https://insights.sbomify.com/CVE-2024-21029/): Cross-site scripting in Complex Maintenance, Repair, and Overhaul (medium 6.1)
- [CVE-2024-21028](https://insights.sbomify.com/CVE-2024-21028/): Cross-site scripting in Complex Maintenance, Repair, and Overhaul (medium 6.1)
- [CVE-2024-21027](https://insights.sbomify.com/CVE-2024-21027/): Cross-site scripting in Complex Maintenance, Repair, and Overhaul (medium 6.1)
- [CVE-2024-21026](https://insights.sbomify.com/CVE-2024-21026/): Missing authorization in Complex Maintenance, Repair, and Overhaul (medium 6.1)
- [CVE-2024-21025](https://insights.sbomify.com/CVE-2024-21025/): Cross-site scripting in Complex Maintenance, Repair, and Overhaul (medium 6.1)
- [CVE-2024-21024](https://insights.sbomify.com/CVE-2024-21024/): Cross-site scripting in Complex Maintenance, Repair, and Overhaul (medium 6.1)
- [CVE-2024-21023](https://insights.sbomify.com/CVE-2024-21023/): Cross-site scripting in Complex Maintenance, Repair, and Overhaul (medium 6.1)
- [CVE-2024-21022](https://insights.sbomify.com/CVE-2024-21022/): Cross-site scripting in Complex Maintenance, Repair, and Overhaul (medium 6.1)
- [CVE-2024-21021](https://insights.sbomify.com/CVE-2024-21021/): Cross-site scripting in Complex Maintenance, Repair, and Overhaul (medium 6.1)
- [CVE-2024-21020](https://insights.sbomify.com/CVE-2024-21020/): Cross-site request forgery in Complex Maintenance, Repair, and Overhaul (medium 6.1)
- [CVE-2024-2102](https://insights.sbomify.com/CVE-2024-2102/): Salon booking system < 9.6.3 - Unauthenticated Stored XSS (medium 4.7)
- [CVE-2024-21019](https://insights.sbomify.com/CVE-2024-21019/): Cross-site scripting in Complex Maintenance, Repair, and Overhaul (medium 6.1)
- [CVE-2024-21018](https://insights.sbomify.com/CVE-2024-21018/): Missing authorization in Complex Maintenance, Repair, and Overhaul (medium 6.1)
- [CVE-2024-21017](https://insights.sbomify.com/CVE-2024-21017/): Cross-site scripting in Complex Maintenance, Repair, and Overhaul (medium 6.1)
- [CVE-2024-21016](https://insights.sbomify.com/CVE-2024-21016/): Cross-site scripting in Complex Maintenance, Repair, and Overhaul (medium 6.1)
- [CVE-2024-21015](https://insights.sbomify.com/CVE-2024-21015/): Other in MySQL Server (medium 5.5)
- [CVE-2024-21014](https://insights.sbomify.com/CVE-2024-21014/): Auth bypass in Hospitality Simphony (critical 9.8)
- [CVE-2024-21013](https://insights.sbomify.com/CVE-2024-21013/): Denial of service in MySQL Server (medium 4.4)
- [CVE-2024-21012](https://insights.sbomify.com/CVE-2024-21012/): Misconfiguration in Java SE JDK and JRE (low 3.7)
- [CVE-2024-21011](https://insights.sbomify.com/CVE-2024-21011/): Denial of service in Java SE JDK and JRE (low 3.7)
- [CVE-2024-21010](https://insights.sbomify.com/CVE-2024-21010/): Missing authorization in Hospitality Simphony (critical 9.9)
- [CVE-2024-2101](https://insights.sbomify.com/CVE-2024-2101/): WordPress Plugin Salon Booking System < 9.6.3 - Unauthenticated Stored Cross-Site Scripting (XSS) (medium 5.7)
- [CVE-2024-21009](https://insights.sbomify.com/CVE-2024-21009/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-21008](https://insights.sbomify.com/CVE-2024-21008/): Denial of service in MySQL Server (medium 4.4)
- [CVE-2024-21007](https://insights.sbomify.com/CVE-2024-21007/): Missing authorization in WebLogic Server (high 7.5)
- [CVE-2024-21006](https://insights.sbomify.com/CVE-2024-21006/): Missing authorization in WebLogic Server (high 7.5)
- [CVE-2024-21005](https://insights.sbomify.com/CVE-2024-21005/): Other in Java SE JDK and JRE (low 3.1)
- [CVE-2024-21004](https://insights.sbomify.com/CVE-2024-21004/): Misconfiguration in Java SE JDK and JRE (low 2.5)
- [CVE-2024-21003](https://insights.sbomify.com/CVE-2024-21003/): Security feature bypass in Java SE JDK and JRE (low 3.1)
- [CVE-2024-21002](https://insights.sbomify.com/CVE-2024-21002/): Misconfiguration in Java SE JDK and JRE (low 2.5)
- [CVE-2024-21001](https://insights.sbomify.com/CVE-2024-21001/): Other in Business Intelligence Enterprise Edition (medium 5.4)
- [CVE-2024-21000](https://insights.sbomify.com/CVE-2024-21000/): Other in MySQL Server (low 3.8)
- [CVE-2024-20999](https://insights.sbomify.com/CVE-2024-20999/): Privilege escalation in Solaris Operating System (high 8.2)
- [CVE-2024-20998](https://insights.sbomify.com/CVE-2024-20998/): Memory corruption in MySQL Server (medium 4.9)
- [CVE-2024-20997](https://insights.sbomify.com/CVE-2024-20997/): Other in Hospitality Simphony (critical 9.9)
- [CVE-2024-20996](https://insights.sbomify.com/CVE-2024-20996/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-20995](https://insights.sbomify.com/CVE-2024-20995/): Denial of service in Database - Enterprise Edition (low 2.4)
- [CVE-2024-20994](https://insights.sbomify.com/CVE-2024-20994/): Denial of service in MySQL Server (medium 5.3)
- [CVE-2024-20993](https://insights.sbomify.com/CVE-2024-20993/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-20992](https://insights.sbomify.com/CVE-2024-20992/): Missing authorization in WebCenter Portal (medium 4.4)
- [CVE-2024-20991](https://insights.sbomify.com/CVE-2024-20991/): Information disclosure in HTTP Server (medium 5.3)
- [CVE-2024-20990](https://insights.sbomify.com/CVE-2024-20990/): Information disclosure in E-Business Suite Technology Stack (medium 5.3)
- [CVE-2024-20989](https://insights.sbomify.com/CVE-2024-20989/): Other in Hospitality Simphony (high 7.0)
- [CVE-2024-20987](https://insights.sbomify.com/CVE-2024-20987/): Other in BI Publisher (formerly XML Publisher) (medium 5.4)
- [CVE-2024-20986](https://insights.sbomify.com/CVE-2024-20986/): Cross-site request forgery in WebLogic Server (medium 6.1)
- [CVE-2024-20985](https://insights.sbomify.com/CVE-2024-20985/): Denial of service in MySQL Server (medium 6.5)
- [CVE-2024-20984](https://insights.sbomify.com/CVE-2024-20984/): Denial of service in MySQL Server (medium 4.4)
- [CVE-2024-20983](https://insights.sbomify.com/CVE-2024-20983/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-20982](https://insights.sbomify.com/CVE-2024-20982/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-20981](https://insights.sbomify.com/CVE-2024-20981/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-20980](https://insights.sbomify.com/CVE-2024-20980/): Other in BI Publisher (formerly XML Publisher) (medium 5.4)
- [CVE-2024-2098](https://insights.sbomify.com/CVE-2024-2098/): Download Manager <= 3.2.89 - Improper Authorization via protectMediaLibrary (high 7.5)
- [CVE-2024-20979](https://insights.sbomify.com/CVE-2024-20979/): Missing authorization in BI Publisher (formerly XML Publisher) (medium 5.4)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/456/