CVE-2019-2726: Medium severity oracle enterprise manager ops center vulnerability

Published May 24, 2019

Updated

Vulnerability in the Enterprise Manager Ops Center component of Oracle Enterprise Manager Products Suite (subcomponent: Services Integration). The supported version that is affected is 12.3.3. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Enterprise Manager Ops Center. While the vulnerability is in Enterprise Manager Ops Center, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Enterprise Manager Ops Center. CVSS 3.0 Base Score 6.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H).

Affected Software

1 affected component

Oracle Enterprise Manager Ops Center=12.3.3

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html

Event History

May 24, 2019

CVE Published

via MITRE·04:24 PM

Data Sourced

via MITRE·04:24 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2019-2726?

CVE-2019-2726 has a low severity rating, indicating it is difficult to exploit, but still poses a risk to affected systems.

How do I fix CVE-2019-2726?

To fix CVE-2019-2726, upgrade to the latest version of Oracle Enterprise Manager Ops Center that addresses this vulnerability.

What systems are affected by CVE-2019-2726?

CVE-2019-2726 affects Oracle Enterprise Manager Ops Center version 12.3.3.

Who can exploit CVE-2019-2726?

A low privileged attacker with network access via HTTP may exploit CVE-2019-2726.

What component is impacted by CVE-2019-2726?

CVE-2019-2726 impacts the Services Integration component of the Oracle Enterprise Manager Ops Center.