PT-2009-5701 · Oracle · Oracle E-Business Suite

Published 2009-10-22 · Updated 2012-10-23 · CVE-2009-3400

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 11.5.10.2, 12.0.6, 12.1.1

Description The issue affects confidentiality and integrity, allowing remote authenticated users to exploit it via unknown vectors.

Recommendations For Oracle E-Business Suite version 11.5.10.2, update to a version that includes the fix for this issue. For Oracle E-Business Suite version 12.0.6, update to a version that includes the fix for this issue. For Oracle E-Business Suite version 12.1.1, update to a version that includes the fix for this issue.

Fix

Related Identifiers

CVE-2009-3400

Affected Products

Oracle E-Business Suite

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2009-3400 · Security Note
• http://us-cert.gov/cas/techalerts/TA09-294A.html · Note
• http://oracle.com/technetwork/topics/security/cpuoct2009-096303.html · Note
• http://securityfocus.com/bid/36767 · Note
• http://securitytracker.com/id?1023059 · Note