Unauthenticated Access Vulnerability in Oracle E-Business Suite's Print Server

CVE-2019-2654

Summary

A vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite, specifically within the Print Server subcomponent, allows an unauthenticated attacker with network access via HTTP to compromise the system. This flaw requires user interaction from a third party to exploit effectively. Although the issue resides in Oracle One-to-One Fulfillment, successful attacks can have a broader impact, potentially granting unauthorized access to sensitive data. Attackers can manipulate data within Oracle One-to-One Fulfillment, including unauthorized updates, inserts, or deletions. Exploiting this vulnerability could lead to significant confidentiality and integrity concerns for affected organizations.

References