Vulnerability in Oracle Application_development_framework
CVE-2019-2899
Vulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware (component: OAM). Supported versions that are affected are 11.1.1.9.0, 11.1.2.4.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high p…
EPSS: 0.009 (55.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 2.4 (Low). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N.
Affected products
- Oracle Application_development_framework — versions 11.1.1.9.0, 11.1.2.4.0, 12.1.3.0.0
- Oracle Hyperion_financial_management — versions 11.1.2.4
- Oracle Jdeveloper — versions 11.1.1.9.0, 11.1.2.4.0, 12.1.3.0.0
- Oracle Peoplesoft_enterprise_scm_purchasing — versions 9.2
- Oracle Corporation Hyperion Financial Management — versions 11.1.2.4
References
- secalert_us@oracle.com (Patch, x_refsource_MISC, Vendor Advisory)
- secalert_us@oracle.com (Patch, x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2019-2899?
- CVE-2019-2899 is a low-severity vulnerability in Oracle Application_development_framework. CVSS score: 2.4/10. Published 2019-10-16.
- How severe is CVE-2019-2899?
- Low severity. CVSS v3 base score is 2.4 out of 10.