Business Process Automation Vulnerability in Oracle Transportation Management by Oracle
CVE-2022-39409

2.7LOW

Key Information:

Vendor
Oracle
Status
Transportation Management
Vendor
CVE Published:
18 October 2022

Summary

A vulnerability in Oracle Transportation Management allows an attacker with high privileges and network access through HTTP to compromise the system. This could lead to unauthorized actions, culminating in a partial denial of service. The affected versions, 6.4.3 and 6.5.1, require immediate attention to mitigate potential risks.

Affected Version(s)

Transportation Management 6.4.3

Transportation Management 6.5.1

References

https://www.oracle.com/security-alerts/cpuoct2022.html

CVSS V3.1

Score:
2.7
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.