Security Flaw in Oracle E-Business Suite Email Center Component

CVE-2019-2651

Summary

A security flaw in the Oracle Email Center component of Oracle E-Business Suite allows unauthenticated attackers with network access via HTTP to compromise the Email Center. This vulnerability requires human interaction from a user other than the attacker for successful exploitation. While the primary issue resides in the Email Center, the impact can cascade to other related products, potentially leading to unauthorized access to sensitive data. Attackers could gain elevated privileges, enabling them to perform unauthorized updates, inserts, or deletions of data within the Email Center. Organizations using affected versions are urged to apply the necessary patches to mitigate risks associated with this vulnerability.

References