Vulnerability in Oracle E-Business Suite's Email Center Component

CVE-2019-2661

What is CVE-2019-2661?

The Oracle Email Center component within Oracle E-Business Suite is exposed to a vulnerability that allows an unauthenticated attacker with network access through HTTP to interfere with its operations. This vulnerability primarily requires human interaction from a user other than the attacker, making the exploitation dependent on user behavior. Once exploited, the attacker can gain unauthorized access to sensitive data or potentially have complete access to any data accessible through the Oracle Email Center. Additionally, this vulnerability could allow unauthorized actions such as updates, inserts, or deletions of critical data.

References