Oracle E-Business Multiple Vulnerabilities (Jan 2019 CPU)

The version of Oracle E-Business installed on the remote host is missing the January 2019 Oracle Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities as noted in the January 2019 Critical Patch Update advisory : - Oracle CRM Technical Foundation Messages component is...

CVE-2019-2453

Vulnerability in the Oracle Performance Management component of Oracle E-Business Suite subcomponent: Performance Management Plan. Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2019-2453

CVE-2019-2453 is a vulnerability in the Oracle E-Business Suite, affecting the Performance Management Plan subcomponent of the Performance Management module. Documents in connected sources confirm that versions 12.1.1, 12.1.2, and 12.1.3 are affected. The underlying issue enables an unauthenticat...