Email Center Vulnerability in Oracle E-Business Suite

CVE-2019-2491

Summary

The Oracle Email Center component of Oracle E-Business Suite features a vulnerability that can potentially be exploited by an unauthenticated attacker with network access via HTTP. This flaw necessitates human interaction, introducing a layer of complexity to exploitation. Although the vulnerability lies within the Email Center, successful attacks could lead to unauthorized data manipulation across the suite, impacting various accessible data repositories. Versions affected include multiple iterations from 12.1.1 through 12.2.8, necessitating immediate attention from users to mitigate possible unauthorized updates, inserts, or deletions of sensitive information.

References