PT-2006-2864 · Oracle · Oracle E-Business Suite

Published 2006-04-20 · Updated 2018-10-18 · CVE-2006-1880

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite and Applications version 11.5.10CU2

Description The issue affects multiple components within Oracle E-Business Suite and Applications, including the Application Install, Oracle Diagnostics Interfaces, Oracle General Ledger, and Oracle Receivables components. The impact and attack vectors of these vulnerabilities are not specified.

Recommendations For Oracle E-Business Suite and Applications version 11.5.10CU2, consider restricting access to the affected components, specifically the Application Install, Oracle Diagnostics Interfaces, Oracle General Ledger, and Oracle Receivables components, until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-1880

Affected Products

Oracle E-Business Suite

References · 11

• http://securityfocus.com/archive/1/432267/100/0/threaded · Vendor Advisory
• http://securitytracker.com/id?1015961 · Patch
• http://securityfocus.com/bid/17590 · Patch
• http://secunia.com/advisories/19712 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-1880 · Security Note
• http://vupen.com/english/advisories/2006/1397 · Note
• http://kb.cert.org/vuls/id/940729 · Note
• http://vupen.com/english/advisories/2006/1571 · Note
• http://oracle.com/technetwork/topics/security/cpuapr2006-090826.html · Note
• http://secunia.com/advisories/19859 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26058 · Note