Vulnerability in Oracle iSupplier Portal of Oracle E-Business Suite

CVE-2019-2583

What is CVE-2019-2583?

A vulnerability exists in the Attachments component of the Oracle iSupplier Portal within the Oracle E-Business Suite, affecting several versions. This easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to breach the Oracle iSupplier Portal. Attackers may require user interaction, yet if successful, they can obtain unauthorized access to sensitive data or gain complete access to everything available through the Oracle iSupplier Portal. This vulnerability poses serious risks, enabling unauthorized updates, inserts, or deletions of accessible data.

References