PT-2009-4435 · Oracle · Oracle E-Business Suite

Published 2009-07-14 · Updated 2017-08-17 · CVE-2009-1980

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 11.5.10.2, 12.0.6, 12.1

Description: The issue affects confidentiality, integrity, and availability. It can be exploited by remote authenticated users via unknown vectors.

Recommendations: For Oracle E-Business Suite version 11.5.10.2, update to a version that includes the fix for this issue. For Oracle E-Business Suite version 12.0.6, update to a version that includes the fix for this issue. For Oracle E-Business Suite version 12.1, update to a version that includes the fix for this issue.

Fix

Related Identifiers

CVE-2009-1980

Affected Products

Oracle E-Business Suite

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2009-1980 · Security Note
• http://oracle.com/technetwork/topics/security/cpujul2009-091332.html · Note
• http://securitytracker.com/id?1022562 · Note
• http://securityfocus.com/bid/35686 · Note
• http://secunia.com/advisories/35776 · Note
• http://vupen.com/english/advisories/2009/1900 · Note
• http://osvdb.org/55898 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51763 · Note