Skip to content
fr Sign in
Not rated

CVE-2019-2825 Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: Oracle…

Description

Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: Oracle Diagnostics Interfaces). Supported versions that are affected are 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Applications Manager. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Applications Manager accessible data as well as unauthorized access to critical data or complete access to all Oracle Applications Manager accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N).

Affected products and versions

Product Affected versions Fixed in
Applications Manager 12.1.3 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Applications Manager

The 14 CVEs of Applications Manager →
CVE-2021-35582 Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: View Reports) 6.5 Medium CVE-2021-35581 Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: View Reports) 4.7 Medium CVE-2021-35580 Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: View Reports) 6.1 Medium CVE-2021-35569 Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics) 4.9 Medium
Track this CVE