Oracle E-Business Multiple Vulnerabilities (Jan 2019 CPU)

The version of Oracle E-Business installed on the remote host is missing the January 2019 Oracle Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities as noted in the January 2019 Critical Patch Update advisory : - Oracle CRM Technical Foundation Messages component is...

CVE-2019-2445

CVE-2019-2445 affects Oracle E-Business Suite Content Manager, subcomponent Cover Letter. Affected versions include 12.1.1–12.2.8. The vulnerability allows unauthenticated, network-accessible attackers to compromise Content Manager via HTTP; exploitation requires user interaction, and attacks can...