Aller au contenu
en Se connecter
Non notée

CVE-2019-2489 Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: OCM Query)

Description

Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: OCM Query). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle One-to-One Fulfillment accessible data as well as unauthorized access to critical data or complete access to all Oracle One-to-One Fulfillment accessible data. CVSS 3.0 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).

Produits et versions touchés

Produit Versions touchées Corrigé en
One-to-One Fulfillment 12.2 12.2.3 → 12.2.8 Pas de correctif indiqué
One-to-One Fulfillment 12.1.3 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de One-to-One Fulfillment

Les 28 CVE de One-to-One Fulfillment →
CVE-2024-20936 Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents) 6.1 Moyenne CVE-2021-2155 Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents) 4.3 Moyenne CVE-2021-2094 Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server) 8.2 Élevée CVE-2021-2100 Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server) 9.1 Critique
Suivre cette CVE