Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-2904

Vulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are 11.1.1.9.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle JDeveloper and ADF. Successful attacks of this vulnerability can result in takeover of Oracle JDeveloper and ADF. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Published

2019-10-16T18:15:27.560

Last Modified

2024-11-21T04:41:46.483

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

6.4

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application oracle application_testing_suite 12.5.0.3 Yes
Application oracle application_testing_suite 13.1.0.1 Yes
Application oracle application_testing_suite 13.2.0.1 Yes
Application oracle application_testing_suite 13.3.0.1 Yes
Application oracle banking_enterprise_collections 2.7.0 Yes
Application oracle banking_enterprise_collections 2.8.0 Yes
Application oracle banking_enterprise_originations 2.7.0 Yes
Application oracle banking_enterprise_originations 2.8.0 Yes
Application oracle banking_enterprise_product_manufacturing 2.7.0 Yes
Application oracle banking_enterprise_product_manufacturing 2.8.0 Yes
Application oracle banking_platform 2.4.0 Yes
Application oracle banking_platform 2.4.1 Yes
Application oracle banking_platform 2.5.0 Yes
Application oracle banking_platform 2.6.0 Yes
Application oracle banking_platform 2.6.1 Yes
Application oracle banking_platform 2.6.2 Yes
Application oracle banking_platform 2.7.0 Yes
Application oracle banking_platform 2.7.1 Yes
Application oracle banking_platform 2.9.0 Yes
Application oracle business_process_management_suite 12.2.1.3.0 Yes
Application oracle business_process_management_suite 12.2.1.4.0 Yes
Application oracle clinical 5.2 Yes
Application oracle communications_diameter_signaling_router ≤ 8.4.0.5 Yes
Application oracle communications_network_integrity ≤ 7.3.6 Yes
Application oracle communications_service_broker 6.0 Yes
Application oracle communications_service_broker 6.1 Yes
Application oracle communications_services_gatekeeper 6.0 Yes
Application oracle communications_services_gatekeeper 6.1 Yes
Application oracle enterprise_repository 11.1.1.7.0 Yes
Application oracle financial_services_lending_and_leasing ≤ 14.2.0 Yes
Application oracle financial_services_lending_and_leasing 12.5.0 Yes
Application oracle financial_services_revenue_management_and_billing_analytics 2.6 Yes
Application oracle financial_services_revenue_management_and_billing_analytics 2.7 Yes
Application oracle financial_services_revenue_management_and_billing_analytics 2.8 Yes
Application oracle flexcube_private_banking 12.0.0 Yes
Application oracle flexcube_private_banking 12.1.0 Yes
Application oracle health_sciences_data_management_workbench 2.4 Yes
Application oracle health_sciences_data_management_workbench 2.5 Yes
Application oracle hyperion_planning 11.1.2.4 Yes
Application oracle rapid_planning 12.1.3 Yes
Application oracle retail_assortment_planning 15.0.3.0 Yes
Application oracle retail_assortment_planning 16.0.3.0 Yes
Application oracle retail_clearance_optimization_engine 13.4 Yes
Application oracle retail_clearance_optimization_engine 14.0.3 Yes
Application oracle retail_clearance_optimization_engine 14.0.5 Yes
Application oracle retail_markdown_optimization 13.4 Yes
Application oracle retail_sales_audit 15.0.3 Yes
Application oracle retail_sales_audit 16.0.2 Yes
References