Oracle E-Business Multiple Vulnerabilities (Jan 2019 CPU)

The version of Oracle E-Business installed on the remote host is missing the January 2019 Oracle Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities as noted in the January 2019 Critical Patch Update advisory : - Oracle CRM Technical Foundation Messages component is...

CVE-2019-2489

Oracle E-Business Suite, One-to-One Fulfillment OCM Query component (versions 12.1.3 through 12.2.8) is affected by CVE-2019-2489. The issue, described in multiple sources, allows an unauthenticated attacker with network access via HTTP to perform unauthorized creation, deletion or modification o...