Unknown vulnerability in Oracle E-Business Suite 11i.1 through 11i.6 allows remote attackers to execute unauthorized PL/SQL procedures by modifying the Oracle Applications URL.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| E-business_suite | Oracle | 11.1 (including) | 11.1 (including) |
| E-business_suite | Oracle | 11.2 (including) | 11.2 (including) |
| E-business_suite | Oracle | 11.3 (including) | 11.3 (including) |
| E-business_suite | Oracle | 11.4 (including) | 11.4 (including) |
| E-business_suite | Oracle | 11.5 (including) | 11.5 (including) |
| E-business_suite | Oracle | 11.6 (including) | 11.6 (including) |
References
- http://otn.oracle.com/deploy/security/pdf/apps_alert_ebiz2.pdf
- http://www.securityfocus.com/bid/4551
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8897
- http://otn.oracle.com/deploy/security/pdf/apps_alert_ebiz2.pdf
- http://www.securityfocus.com/bid/4551
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8897