oracle commerce-merchandising CVE-2019-2713 is a vulnerability in Oracle Commerce Merchandising
Published on April 23, 2019

Vulnerability in the Oracle Commerce Merchandising component of Oracle Commerce (subcomponent: Asset Manager). The supported version that is affected is 11.2.0.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Merchandising. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Commerce Merchandising accessible data as well as unauthorized read access to a subset of Oracle Commerce Merchandising accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).

NVD


Products Associated with CVE-2019-2713

Want to know whenever a new CVE is published for Oracle Commerce Merchandising? stack.watch will email you.

Oracle Commerce Merchandising
 

Affected Versions

Oracle Corporation Commerce Merchandising Version 11.2.0.3 is affected by CVE-2019-2713

Exploit Probability

EPSS
0.68%
Percentile
71.23%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.