Aller au contenu
Non notée

CVE-2019-2488 Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Session…

Description

Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Session Management). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle CRM Technical Foundation accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

Produits et versions touchés

Produit Versions touchées Corrigé en
CRM Technical Foundation 12.2 12.2.3 → 12.2.8 Pas de correctif indiqué
CRM Technical Foundation 12.1.3 Pas de correctif indiqué
Les 40 CVE de CRM Technical Foundation →
Suivre cette CVE