Denial of Service Vulnerability in Oracle Enterprise Manager Ops Center
CVE-2019-2726

6.3MEDIUM

Key Information:

Vendor
Oracle
Status
Enterprise Manager Ops Center
Vendor
CVE Published:
24 May 2019

Summary

A vulnerability exists in the Enterprise Manager Ops Center component of Oracle Enterprise Manager Products Suite allowing a low privileged attacker with network access via HTTP to disrupt the service. This flaw may lead to unauthorized actions, such as causing the Enterprise Manager Ops Center to hang or crash, which can affect the overall stability of additional products. Given the nature of the attack vector, it poses a significant risk to service availability.

Affected Version(s)

Enterprise Manager Ops Center 12.3.3

References

http://www.oracle.com/technetwork/security-advisory/cpuap...
x_refsource_MISC

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.