Vulnerability in Oracle E-Business Suite's Email Center Component

CVE-2019-2492

Summary

An unauthenticated access vulnerability exists in the Oracle Email Center component of Oracle E-Business Suite. This weakness affects supported versions and allows an attacker with network access via HTTP to compromise the Email Center. Notably, successful exploitation of this vulnerability requires human interaction from a user other than the attacker. Although the attack targets the Email Center, the consequences may extend to other related products, potentially allowing unauthorized updates, inserts, or deletions of data accessible through the Email Center.

References