CVE-2019-2728
First published: Tue Jul 23 2019(Updated: )
Vulnerability in the Enterprise Manager Ops Center component of Oracle Enterprise Manager Products Suite (subcomponent: Networking). Supported versions that are affected are 12.3.3 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Enterprise Manager Ops Center. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Enterprise Manager Ops Center accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Enterprise Manager Ops Center | =12.3.3 | |
| Oracle Enterprise Manager Ops Center | =12.4.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2019-2728?
CVE-2019-2728 is considered a critical vulnerability due to its potential to allow unauthorized access to sensitive data.
How do I fix CVE-2019-2728?
To fix CVE-2019-2728, update to Oracle Enterprise Manager Ops Center version 12.4.0 or later.
Who is affected by CVE-2019-2728?
CVE-2019-2728 affects users of Oracle Enterprise Manager Ops Center versions 12.3.3 and 12.4.0.
What type of attack does CVE-2019-2728 enable?
CVE-2019-2728 enables low privileged attackers to exploit the vulnerability remotely through HTTP.
When was CVE-2019-2728 disclosed?
CVE-2019-2728 was disclosed in July 2019 as part of Oracle's critical patch update.
- agent/type
- agent/softwarecombine
- agent/remedy
- agent/severity
- agent/references
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/oracle
- canonical/oracle enterprise manager ops center
- version/oracle enterprise manager ops center/12.3.3
- version/oracle enterprise manager ops center/12.4.0