Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-2899

Опубликовано: 16 окт. 2019
Источник: nvd
CVSS3: 2.4
CVSS3: 2.4
CVSS2: 3.5
EPSS Низкий

Описание

Vulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware (component: OAM). Supported versions that are affected are 11.1.1.9.0, 11.1.2.4.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle JDeveloper and ADF. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle JDeveloper and ADF accessible data. CVSS 3.0 Base Score 2.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N).

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:oracle:application_development_framework:11.1.1.9.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:application_development_framework:11.1.2.4.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:application_development_framework:12.1.3.0.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:application_development_framework:12.2.1.3.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:jdeveloper:11.1.1.9.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:jdeveloper:11.1.2.4.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:jdeveloper:12.1.3.0.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:jdeveloper:12.2.1.3.0:*:*:*:*:*:*:*
Конфигурация 2

Одно из

cpe:2.3:a:oracle:hyperion_financial_management:11.1.2.4:*:*:*:*:*:*:*
cpe:2.3:a:oracle:peoplesoft_enterprise_scm_purchasing:9.2:*:*:*:*:*:*:*

EPSS

Процентиль: 58%
0.00369
Низкий

2.4 Low

CVSS3

2.4 Low

CVSS3

3.5 Low

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

github логотип

GHSA-q54x-xrq8-px2p

CVSS3: 2.4
github
больше 3 лет назад

Vulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware (component: OAM). Supported versions that are affected are 11.1.1.9.0, 11.1.2.4.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle JDeveloper and ADF. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle JDeveloper and ADF accessible data. CVSS 3.0 Base Score 2.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N).

fstec логотип

BDU:2019-04011

CVSS3: 2.4
fstec
больше 6 лет назад

Уязвимость компонента OAM приложения Oracle JDeveloper and ADF, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 58%
0.00369
Низкий

2.4 Low

CVSS3

2.4 Low

CVSS3

3.5 Low

CVSS2

Дефекты

NVD-CWE-noinfo