CVE-2019-2930
First published: Wed Oct 16 2019(Updated: )
Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Wireless). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Field Service. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Field Service, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Field Service accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Field Service | >=12.1.1<=12.1.3 | |
| Oracle Field Service | >=12.2.3<=12.2.8 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID for this Oracle Field Service vulnerability?
The vulnerability ID for this Oracle Field Service vulnerability is CVE-2019-2930.
Which component of Oracle E-Business Suite is affected by this vulnerability?
The Wireless component of Oracle E-Business Suite is affected by this vulnerability.
What versions of Oracle Field Service are affected by this vulnerability?
Versions 12.1.1-12.1.3 and 12.2.3-12.2.8 of Oracle Field Service are affected by this vulnerability.
What is the severity of CVE-2019-2930?
The severity of CVE-2019-2930 is medium with a severity value of 4.7.
How can an attacker exploit this vulnerability?
An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise Oracle Field Service.
Where can I find more information about CVE-2019-2930?
You can find more information about CVE-2019-2930 at the following URL: http://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
- collector/nvd-index
- agent/severity
- agent/references
- agent/author
- agent/description
- agent/type
- agent/event
- agent/last-modified-date
- agent/remedy
- agent/softwarecombine
- agent/tags
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/oracle
- canonical/oracle field service
- version/oracle field service/12.1.1
- version/oracle field service/12.1.3
- version/oracle field service/12.2.3
- version/oracle field service/12.2.8