Not rated
CVE-2018-2869 Vulnerability in the Oracle Human Resources component of Oracle E-Business Suite (subcomponent: General Utilities)
Description
Vulnerability in the Oracle Human Resources component of Oracle E-Business Suite (subcomponent: General Utilities). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Human Resources. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Human Resources accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Human Resources 12.2 | 12.2.3 → 12.2.7 | No fix stated |
| Human Resources 12.1 | 12.1.1 → 12.1.3 | No fix stated |
Other CVEs of Human Resources
The 11 CVEs of Human Resources →
CVE-2021-2365
Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: People Management)
8.1
High
CVE-2021-2260
Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: iRecruitment)
8.1
High
CVE-2020-2956
Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Hierarchy Diagrammers)
8.1
High
CVE-2020-2882
Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Hierarchy Diagrammers)
8.1
High