CVE-2018-2823: Medium severity oracle transportation execution vulnerability

Published Apr 19, 2018

Updated

Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: Database). The supported version that is affected is 6.4.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Transportation Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Transportation Management accessible data. CVSS 3.0 Base Score 6.5 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N).

Affected Software

1 affected component

Oracle Transportation Management=6.4.3

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html

Event History

Apr 19, 2018

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2018-2823?

CVE-2018-2823 is a vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite.

What is the severity of CVE-2018-2823?

The severity of CVE-2018-2823 is medium with a CVSS score of 6.5.

How can CVE-2018-2823 be exploited?

CVE-2018-2823 can be easily exploited by a low privileged attacker with network access via HTTP.

Which version of Oracle Transportation Management is affected by CVE-2018-2823?

The version 6.4.3 of Oracle Transportation Management is affected by CVE-2018-2823.

Where can I find more information about CVE-2018-2823?

You can find more information about CVE-2018-2823 on the Oracle website and SecurityFocus.