CVE-2019-2575
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Vulnerability in the Oracle AutoVue 3D Professional Advanced component of Oracle Supply Chain Products Suite (subcomponent: Format Handling - 2D). Supported versions that are affected are 21.0.0 and 21.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle AutoVue 3D Professional Advanced. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle AutoVue 3D Professional Advanced accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).
Hay una vulnerabilidad en el componente Oracle AutoVue 3D Professional Advanced de Oracle Supply Chain Products Suite (subcomponent: Format Handling - 2D). Las versiones compatibles que se ven afectadas son 21.0.0 y versión 21.0.1. Una vulnerabilidad fácilmente aprovechable permite que un atacante no identificado con acceso a la red por medio de HTTP comprometa a Oracle AutoVue 3D Professional Advanced. Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle AutoVue 3D Professional Advanced. CVSS versión 3.0 Puntuación Base 5.3 (Impactos de confidencialidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).
CVSS Scores
SSVC
- Decision:Attend
Timeline
- 2018-12-14 CVE Reserved
- 2019-04-23 CVE Published
- 2023-03-08 EPSS Updated
- 2024-10-02 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (1)
URL | Tag | Source |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
http://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html | 2020-08-24 |
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Oracle Search vendor "Oracle" | Autovue 3d Professional Advanced Search vendor "Oracle" for product "Autovue 3d Professional Advanced" | 21.0.0 Search vendor "Oracle" for product "Autovue 3d Professional Advanced" and version "21.0.0" | - |
Affected
| ||||||
Oracle Search vendor "Oracle" | Autovue 3d Professional Advanced Search vendor "Oracle" for product "Autovue 3d Professional Advanced" | 21.0.1 Search vendor "Oracle" for product "Autovue 3d Professional Advanced" and version "21.0.1" | - |
Affected
|