CVE-2019-2728: Medium severity oracle enterprise manager ops center vulnerability

Published Jul 23, 2019

Updated

Vulnerability in the Enterprise Manager Ops Center component of Oracle Enterprise Manager Products Suite (subcomponent: Networking). Supported versions that are affected are 12.3.3 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Enterprise Manager Ops Center. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Enterprise Manager Ops Center accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).

Affected Software

2 affected components

Oracle Enterprise Manager Ops Center=12.3.3

Oracle Enterprise Manager Ops Center=12.4.0

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html

Event History

Jul 23, 2019

CVE Published

via MITRE·10:31 PM

Data Sourced

via MITRE·10:31 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2019-2728?

CVE-2019-2728 is considered a critical vulnerability due to its potential to allow unauthorized access to sensitive data.

How do I fix CVE-2019-2728?

To fix CVE-2019-2728, update to Oracle Enterprise Manager Ops Center version 12.4.0 or later.

Who is affected by CVE-2019-2728?

CVE-2019-2728 affects users of Oracle Enterprise Manager Ops Center versions 12.3.3 and 12.4.0.

What type of attack does CVE-2019-2728 enable?

CVE-2019-2728 enables low privileged attackers to exploit the vulnerability remotely through HTTP.

When was CVE-2019-2728 disclosed?

CVE-2019-2728 was disclosed in July 2019 as part of Oracle's critical patch update.