Unauthorized Access Vulnerability in Oracle E-Business Suite Trade Management Component

CVE-2019-2640

What is CVE-2019-2640?

This vulnerability in the Oracle Trade Management component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. Exploitation of this flaw necessitates human interaction from a user other than the attacker. Although the primary weakness lies within Oracle Trade Management, successful exploitation can lead to unauthorized access to critical data across other related products. An attacker could gain full access and perform unauthorized updates, inserts, or deletions of sensitive data within the Trade Management system.

References