Security Vulnerability in Oracle Transportation Management by Oracle

CVE-2019-2709

Summary

A vulnerability exists in the Oracle Transportation Management component of Oracle Supply Chain Products Suite that allows an unauthenticated attacker with network access via HTTP to compromise the system. It is especially concerning as attacks can only be initiated with human interaction from a user not associated with the attacker. While the vulnerability is specific to Oracle Transportation Management, it may lead to unauthorized updates, inserts, or deletions of accessible data and unauthorized read access to certain data sets within the system. This could significantly compromise the integrity and confidentiality of data managed by the affected component.

References