Vulnerability in Oracle Forms of Oracle Fusion Middleware

CVE-2019-2886

Summary

A vulnerability exists in Oracle Forms within Oracle Fusion Middleware that could allow an unauthenticated attacker with network access via HTTP to compromise the application. This issue requires human interaction from a user other than the attacker, but successful exploitation may lead to unauthorized access, including the ability to read, update, insert, or delete sensitive data accessible through Oracle Forms. The vulnerability primarily affects version 12.2.1.3.0, though its impact could extend to other connected systems.

References