CVE-2019-2396: Medium severity oracle e-business suite vulnerability
Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Messages). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle CRM Technical Foundation, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle CRM Technical Foundation accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2019-2396?
CVE-2019-2396 is a vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite.
Which versions of Oracle E-Business Suite are affected by CVE-2019-2396?
Oracle E-Business Suite versions 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7, and 12.2.8 are affected by CVE-2019-2396.
What is the severity of CVE-2019-2396?
CVE-2019-2396 has a severity rating of 4.7, which is considered medium.
How can an attacker exploit CVE-2019-2396?
CVE-2019-2396 allows an unauthenticated attacker with network access to exploit the vulnerability.
Where can I find more information about CVE-2019-2396?
You can find more information about CVE-2019-2396 on the Oracle website and SecurityFocus.