What is CVE-2019-2720?

CVE-2019-2720 is a low-severity vulnerability in Oracle Data Integrator. CVSS score: 3.1/10. Published 2019-04-23.

How severe is CVE-2019-2720?

Low severity. CVSS v3 base score is 3.1 out of 10.

Vulnerability in Oracle Data Integrator

CVE-2019-2720

Vulnerability in the Oracle Data Integrator component of Oracle Fusion Middleware (subcomponent: ODI Tools). Supported versions that are affected are 11.1.1.9.0 and 12.2.1.3.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Data Integrator. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Data Integrator accessible data. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N).

EPSS: 0.008 (52.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.1 (Low). Vector: CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N.

Affected products

Oracle Data_integrator — versions 11.1.1.9.0, 12.2.1.3.0
Oracle Corporation Data Integrator — versions 11.1.1.9.0, 12.2.1.3.0

References

secalert_us@oracle.com (Patch, x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2019-2720?: CVE-2019-2720 is a low-severity vulnerability in Oracle Data Integrator. CVSS score: 3.1/10. Published 2019-04-23.
How severe is CVE-2019-2720?: Low severity. CVSS v3 base score is 3.1 out of 10.