Unauthenticated Access Vulnerability in Oracle E-Business Suite's Content Manager

CVE-2019-2445

Summary

A vulnerability exists in Oracle E-Business Suite's Content Manager that enables an unauthenticated attacker with network access via HTTP to exploit the system. This flaw requires human interaction from a user other than the attacker to successfully compromise the Content Manager. While primarily affecting the Content Manager, the ramifications of successful exploitation can extend to other integrated products, potentially allowing unauthorized access to sensitive data. Attackers could gain the capability to update, insert, or delete data within the Content Manager, leading to significant data integrity and confidentiality issues.

References