Vulnerability in Oracle E-Business Suite's CRM User Management Framework

CVE-2019-2665

What is CVE-2019-2665?

A security flaw in the Oracle Common Applications component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the CRM User Management Framework. This vulnerability requires human interaction from a user other than the attacker, presenting specific risks to valuable information. Exploitation can lead to unauthorized access to sensitive data and may permit attackers to perform unauthorized updates, insertions, or deletions of accessible data. Despite being contained within Oracle Common Applications, successful attacks can have far-reaching implications on other interconnected products.

References