First published: Thu Apr 22 2021(Updated: )
An unspecified vulnerability in Oracle E-Business Suite related to the Oracle Payables component could allow an authenticated attacker to cause high confidentiality impact, high integrity impact, and no availability impact.
Credit: secalert_us@oracle.com
Affected Software | Affected Version | How to fix |
---|---|---|
Oracle Payables | >=12.1.1<=12.1.3 | |
Oracle Payables | >=12.2.3<=12.2.10 | |
IBM Data Virtualization on Cloud Pak for Data | <=3.0 | |
IBM Watson Query with Cloud Pak for Data as a Service | <=2.2 | |
IBM Watson Query with Cloud Pak for Data as a Service | <=2.1 | |
IBM Watson Query with Cloud Pak for Data as a Service | <=2.0 | |
IBM Data Virtualization on Cloud Pak for Data | <=1.8 | |
IBM Data Virtualization on Cloud Pak for Data | <=1.7 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-2259 is classified as having a high confidentiality impact and high integrity impact.
To remediate CVE-2021-2259, apply the latest security patches provided by Oracle for the affected Oracle Payables components.
CVE-2021-2259 affects Oracle Payables versions from 12.1.1 to 12.1.3 and from 12.2.3 to 12.2.10.
No, CVE-2021-2259 requires authentication for an attacker to exploit the vulnerability.
CVE-2021-2259 does not have an availability impact.