CVE-2019-2487: Medium severity oracle transportation execution vulnerability

Published Jan 16, 2019

Updated

Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: UI Infrastructure). Supported versions that are affected are 6.3.7, 6.4.1, 6.4.2 and 6.4.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Transportation Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Transportation Management accessible data. CVSS 3.0 Base Score 6.5 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N).

Affected Software

4 affected components

Oracle Transportation Management=6.3.7

Oracle Transportation Management=6.4.1

Oracle Transportation Management=6.4.2

Oracle Transportation Management=6.4.3

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html

Event History

Jan 16, 2019

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

DescriptionWeakness

Data Sourced

via NVD·07:30 PM

RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

What is the vulnerability ID for this Oracle Transportation Management vulnerability?

The vulnerability ID for this Oracle Transportation Management vulnerability is CVE-2019-2487.

What is the severity of CVE-2019-2487?

The severity of CVE-2019-2487 is medium.

Which software versions are affected by CVE-2019-2487?

The affected software versions for CVE-2019-2487 are 6.3.7, 6.4.1, 6.4.2, and 6.4.3.

What is the exploitability of CVE-2019-2487?

CVE-2019-2487 is an easily exploitable vulnerability.

Where can I find more information about CVE-2019-2487?

You can find more information about CVE-2019-2487 on the Oracle website and SecurityFocus.