Oracle E-Business Multiple Vulnerabilities (July 2018 CPU)

The version of Oracle E-Business installed on the remote host is missing the July 2018 Oracle Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities as noted in the July 2018 Critical Patch Update advisory : - An unspecified vulnerability in the Oracle One-to-One...

CVE-2018-2934

CVE-2018-2934 affects Oracle E-Business Suite, Oracle Application Object Library (Attachments/File Upload) in 12.1.3. An unauthenticated, network-accessible attacker via HTTP can compromise data, allowing unauthorized update/insert/delete on AOL data. Connected sources corroborate the issue and c...