CVE-2018-3256
First published: Wed Oct 17 2018(Updated: )
Vulnerability in the Oracle Email Center component of Oracle E-Business Suite (subcomponent: Message Display). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Email Center. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Email Center, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Email Center accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Email Center | =12.1.1 | |
| Oracle Email Center | =12.1.2 | |
| Oracle Email Center | =12.1.3 | |
| Oracle Email Center | =12.2.3 | |
| Oracle Email Center | =12.2.4 | |
| Oracle Email Center | =12.2.5 | |
| Oracle Email Center | =12.2.6 | |
| Oracle Email Center | =12.2.7 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2018-3256?
CVE-2018-3256 is classified as an easily exploitable vulnerability that allows unauthenticated attackers to gain access to the affected Oracle Email Center component.
What versions of Oracle Email Center are affected by CVE-2018-3256?
CVE-2018-3256 affects Oracle Email Center versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, and 12.2.7.
How do I fix CVE-2018-3256?
To fix CVE-2018-3256, Oracle recommends that users apply the latest security patch available for their specific version of Oracle Email Center.
Who can exploit CVE-2018-3256?
CVE-2018-3256 can be exploited by an unauthenticated attacker with network access to the Oracle Email Center application.
What impact does CVE-2018-3256 have on systems?
CVE-2018-3256 can lead to unauthorized access and potential manipulation of sensitive data in the Oracle E-Business Suite.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- agent/severity
- agent/author
- agent/remedy
- agent/references
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- vendor/oracle
- canonical/oracle email center
- version/oracle email center/12.1.1
- version/oracle email center/12.1.2
- version/oracle email center/12.1.3
- version/oracle email center/12.2.3
- version/oracle email center/12.2.4
- version/oracle email center/12.2.5
- version/oracle email center/12.2.6
- version/oracle email center/12.2.7