CVE-2019-2492: Medium severity oracle e-business suite vulnerability
Vulnerability in the Oracle Email Center component of Oracle E-Business Suite (subcomponent: Message Display). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Email Center. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Email Center, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Email Center accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2019-2492?
CVE-2019-2492 is a vulnerability in the Oracle Email Center component of Oracle E-Business Suite that allows an unauthenticated attacker to exploit the system.
Which versions of Oracle E-Business Suite are affected by CVE-2019-2492?
Oracle E-Business Suite versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7, and 12.2.8 are affected by CVE-2019-2492.
How severe is CVE-2019-2492?
CVE-2019-2492 has a severity rating of 4.7 (medium).
How can an attacker exploit CVE-2019-2492?
An unauthenticated attacker with network access can exploit CVE-2019-2492 easily.
Where can I find more information about CVE-2019-2492?
You can find more information about CVE-2019-2492 on the Oracle website and the SecurityFocus website.