CVE-2019-2904 in Rapid Planninginfo

Summary

Vulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are 11.1.1.9.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle JDeveloper and ADF. Successful attacks of this vulnerability can result in takeover of Oracle JDeveloper and ADF. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Responsible

Oracle

Reservation

12/14/2018

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

IDVulnerabilityCWEExpCouCVE
173678Oracle Rapid Planning User interface Remote Code Execution
 
Not definedOfficial fixCVE-2019-2904
163212Oracle Business Process Management Suite Runtime
 
Not definedOfficial fixCVE-2019-2904
163178Oracle Enterprise Repository Security Subsystem - 12c Remote Code Execution
 
Not definedOfficial fixCVE-2019-2904
163021Oracle Communications Diameter Signaling Router Platform Remote Code Execution
 
Not definedOfficial fixCVE-2019-2904
158230Oracle Financial Services Lending/Leasing Core Remote Code Execution
 
Not definedOfficial fixCVE-2019-2904
158117Oracle Communications Network Integrity User Remote Code Execution
 
Not definedOfficial fixCVE-2019-2904
153441Oracle FLEXCUBE Private Banking Framework Remote Code Execution
 
Not definedOfficial fixCVE-2019-2904
153439Oracle Financial Services Revenue Management Dashboards Remote Code Execution
 
Not definedOfficial fixCVE-2019-2904
153437Oracle Banking Platform Framework Remote Code Execution
 
Not definedOfficial fixCVE-2019-2904
153436Oracle Banking Enterprise Product Manufacturing Framework Remote Code Execution
 
Not definedOfficial fixCVE-2019-2904
153434Oracle Banking Enterprise Originations Framework Remote Code Execution
 
Not definedOfficial fixCVE-2019-2904
153432Oracle Banking Enterprise Collections Framework Remote Code Execution
 
Not definedOfficial fixCVE-2019-2904
153308Oracle Communications Services Gatekeeper API Management Portal Remote Code Execution
 
Not definedOfficial fixCVE-2019-2904
153307Oracle Communications Service Broker Admin Console Remote Code Execution
 
Not definedOfficial fixCVE-2019-2904
148946Oracle Retail Sales Audit Operational Insights Remote Code Execution
 
Not definedOfficial fixCVE-2019-2904
148944Oracle Retail Markdown Optimization Common Component Integration Remote Code Execution
 
Not definedOfficial fixCVE-2019-2904
148940Oracle Retail Clearance Optimization Engine Dataset Componen Remote Code Execution
 
Not definedOfficial fixCVE-2019-2904
148939Oracle Retail Assortment Planning Application Core Remote Code Execution
 
Not definedOfficial fixCVE-2019-2904
148881Oracle Hyperion Planning Application Development Remote Code Execution
 
Not definedOfficial fixCVE-2019-2904
148874Oracle Health Sciences Data Management Workbench User Remote Code Execution
 
Not definedOfficial fixCVE-2019-2904
148873Oracle Clinical User Remote Code Execution
 
Not definedOfficial fixCVE-2019-2904
148757Oracle Application Testing Suite Load Testing for Web Apps Remote Code Execution
 
Not definedOfficial fixCVE-2019-2904
143608Oracle JDeveloper/ADF SQLite Remote Code Execution
 
Not definedOfficial fixCVE-2019-2904

Description

CPE

CWE

CVSS

Exploits

History

Diff

Relate

Threat Intelligence

API JSON

API XML

API CSV

Sources

◂ PreviousOverviewNext ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!