CVE-2019-2733: Medium severity oracle demantra demand management vulnerability

Published Jul 23, 2019

Updated

Vulnerability in the Oracle Demantra Demand Management component of Oracle Supply Chain Products Suite (subcomponent: Product Security). The supported version that is affected is 7.3.1.5.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Demantra Demand Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Demantra Demand Management accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).

Affected Software

1 affected component

Oracle Demantra Demand Management=7.3.1.5.2

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html

Event History

Jul 23, 2019

CVE Published

via MITRE·10:31 PM

Data Sourced

via MITRE·10:31 PM

DescriptionWeakness

Frequently Asked Questions

What is the vulnerability ID of this Oracle Demantra vulnerability?

The vulnerability ID of this Oracle Demantra vulnerability is CVE-2019-2733.

What is the severity of CVE-2019-2733?

The severity of CVE-2019-2733 is medium, with a severity value of 4.3.

What is the affected software version of CVE-2019-2733?

The affected software version of CVE-2019-2733 is Oracle Demantra Demand Management 7.3.1.5.2.

How can this vulnerability be exploited?

This vulnerability can be exploited by a low privileged attacker with network access via HTTP.

Where can I find more information about CVE-2019-2733?

More information about CVE-2019-2733 can be found at the following link: http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html