CVE-2019-2897 — Oracle Mysql Server vulnerability

5 documents4 sources
Severity
6.4MEDIUMNVD
EPSS
0.3%
top 43.87%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Oracle Mysql ServerOracle Corporation Enterprise Manager Base PlatformOracle Business Intelligence+1 more
Timeline
PublishedOct 16
Latest updateMay 24

Description

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Actions). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. While the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may significantly impact additional products. Succes…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:NExploitability: 3.1 | Impact: 2.7

Affected Packages4 packages

▶NVDoracle/business_intelligence12.2.1.3.0, 12.2.1.4.0+1
▶NVDoracle/mysql_server5.0.0 — 5.7.34+1

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-cf73-w797-j9rw: Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Actions)↗2022-05-24
▶
CVEList
CVE-2019-2897: Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Actions)↗2019-10-16
▶

📋Vendor Advisories

2
Oracle
Oracle Oracle Enterprise Manager Risk Matrix: Enterprise Config Management — CVE-2019-2897↗2021-07-15
▶
Oracle
Oracle Oracle Enterprise Manager Risk Matrix: Event Management — CVE-2019-2897↗2020-10-15
▶
CVE-2019-2897 — Oracle Mysql Server vulnerability | cvebase