CVE-2019-2719: Medium severity oracle knowledge vulnerability
Vulnerability in the Oracle Knowledge component of Oracle Siebel CRM (subcomponent: Web Applications (InfoCenter)). Supported versions that are affected are 8.5.1.0 - 8.5.1.7, 8.6.0 and 8.6.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Knowledge, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Knowledge accessible data as well as unauthorized read access to a subset of Oracle Knowledge accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-2719?
CVE-2019-2719 is considered an easily exploitable vulnerability that can allow unauthorized access to Oracle Siebel CRM.
How do I fix CVE-2019-2719?
To fix CVE-2019-2719, Oracle recommends applying the latest patches provided for the affected versions of Oracle Knowledge Management.
Which versions of Oracle Knowledge Management are affected by CVE-2019-2719?
The affected versions are 8.5.1.0 to 8.5.1.7, 8.6.0, and 8.6.1.
Can an attacker exploit CVE-2019-2719 remotely?
Yes, CVE-2019-2719 can be exploited remotely by unauthenticated attackers with network access via HTTP.
What components of Oracle Siebel CRM are impacted by CVE-2019-2719?
CVE-2019-2719 specifically impacts the Oracle Knowledge component of Oracle Siebel CRM.