CVE-2011-2303: Low severity oracle e-business suite vulnerability

Published Oct 18, 2011

Updated

Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.2, and 12.1.3 allows remote authenticated users to affect integrity via unknown vectors related to Attachments / File Upload.

Affected Software

4 affected components

Oracle E-Business Suite=11.5.10.2

Oracle E-Business Suite=12.0.6

Oracle E-Business Suite=12.1.2

Oracle E-Business Suite=12.1.3

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html

Event History

Oct 18, 2011

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-2303?

CVE-2011-2303 has a medium severity rating, indicating potential risks to data integrity for authenticated users.

How do I fix CVE-2011-2303?

To mitigate CVE-2011-2303, apply the latest security patches provided by Oracle for affected versions of E-Business Suite.

Who is affected by CVE-2011-2303?

CVG-2011-2303 affects users of Oracle E-Business Suite versions 11.5.10.2, 12.0.6, 12.1.2, and 12.1.3.

What kinds of attacks can exploit CVE-2011-2303?

CVE-2011-2303 may be exploited via unknown vectors related to attachments or file uploads by remote authenticated users.

Is there a workaround for CVE-2011-2303?

Currently, the recommended approach is to apply the security patches, as no documented workaround exists for CVE-2011-2303.