Vulnerability in Oracle E-Business Suite's CRM User Management Framework

CVE-2019-2665

What is CVE-2019-2665?

A security flaw in the Oracle Common Applications component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the CRM User Management Framework. This vulnerability requires human interaction from a user other than the attacker, presenting specific risks to valuable information. Exploitation can lead to unauthorized access to sensitive data and may permit attackers to perform unauthorized updates, insertions, or deletions of accessible data. Despite being contained within Oracle Common Applications, successful attacks can have far-reaching implications on other interconnected products.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References