PT-2006-2864 · Oracle · Oracle E-Business Suite

Publicado 2006-04-20 · Atualizado 2018-10-18 · CVE-2006-1880

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite and Applications version 11.5.10CU2

Description The issue affects multiple components within Oracle E-Business Suite and Applications, including the Application Install, Oracle Diagnostics Interfaces, Oracle General Ledger, and Oracle Receivables components. The impact and attack vectors of these vulnerabilities are not specified.

Recommendations For Oracle E-Business Suite and Applications version 11.5.10CU2, consider restricting access to the affected components, specifically the Application Install, Oracle Diagnostics Interfaces, Oracle General Ledger, and Oracle Receivables components, until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2006-1880

Produtos afetados

Oracle E-Business Suite

Referências · 11

• http://vupen.com/english/advisories/2006/1397 · Nota
• http://securityfocus.com/archive/1/432267/100/0/threaded · Aviso do Fabricante
• http://kb.cert.org/vuls/id/940729 · Nota
• http://vupen.com/english/advisories/2006/1571 · Nota
• http://securitytracker.com/id?1015961 · Correção
• http://securityfocus.com/bid/17590 · Correção
• http://secunia.com/advisories/19712 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2006-1880 · Nota de Segurança
• http://oracle.com/technetwork/topics/security/cpuapr2006-090826.html · Nota
• http://secunia.com/advisories/19859 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26058 · Nota