Remote Code Execution Vulnerability in Oracle E-Business Suite
CVE-2019-2603

8.2HIGH

Key Information:

Vendor
Oracle
Status
One-to-one Fulfillment
Vendor
CVE Published:
23 April 2019

Summary

The vulnerability in Oracle's E-Business Suite, specifically within the One-to-One Fulfillment component, allows unauthenticated attackers to potentially compromise the system via HTTP requests. Exploitation requires interaction from a user other than the attacker, which can lead to unauthorized access to sensitive information and the ability to manipulate Oracle One-to-One Fulfillment data. The impact extends beyond this component, potentially affecting other interconnected products.

Affected Version(s)

One-to-One Fulfillment 12.1.1

One-to-One Fulfillment 12.1.2

One-to-One Fulfillment 12.1.3

References

http://www.oracle.com/technetwork/security-advisory/cpuap...
x_refsource_MISC

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.