Oracle E-Business Multiple Vulnerabilities (Oct 2018 CPU)

The version of Oracle E-Business installed on the remote host is missing the October 2018 Oracle Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities as noted in the October 2018 Critical Patch Update advisory : - An unspecified vulnerability in the Oracle Trade...

CVE-2018-3011

CVE-2018-3011 affects Oracle E-Business Suite Trade Management User Interface. Affected versions: 12.1.1–12.2.7. The vulnerability permits unauthenticated remote access via HTTP to compromise Trade Management and potentially other products, with attacks requiring user interaction. Consequences in...