Unauthorized Access Vulnerability in Oracle Business Process Management Suite by Oracle

CVE-2019-2706

What is CVE-2019-2706?

This vulnerability within the Oracle Business Process Management Suite allows an unauthenticated attacker to exploit the BPM Foundation Services via HTTP. By requiring human interaction from another party, the attacker can compromise sensitive data. Successful exploitation may lead to unauthorized access and manipulation, including updates, inserts, or deletions of crucial information within the accessible datasets of the Oracle Business Process Management Suite.

References