Oracle E-Business Suite CVE-2018-2656 Remote Security Vulnerability

Bugtraq ID:	102639
Class:	Unknown
CVE:	CVE-2018-2656
Remote:	Yes
Local:	No
Published:	Jan 16 2018 12:00AM
Updated:	Jan 16 2018 12:00AM
Credit:	Juan Pablo Perez Etchegoyen of Onapsis.
Vulnerable:	Oracle E-Business Suite 12.2.7 Oracle E-Business Suite 12.2.6 Oracle E-Business Suite 12.2.3 Oracle E-Business Suite 12.1.2 Oracle E-Business Suite 12.1.1 Oracle E-Business Suite 12.2.5 Oracle E-Business Suite 12.2.4 Oracle E-Business Suite 12.1.3
Not Vulnerable:

Oracle E-Business Suite CVE-2018-2656 Remote Security Vulnerability

Oracle E-Business Suite is prone to a remote security vulnerability in 'General Ledger' product.

This vulnerability affects the 'Data Manager Server' component and can be exploited over the 'HTTP' protocol.

This vulnerability affects the following supported versions:
12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7

Oracle E-Business Suite CVE-2018-2656 Remote Security Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Oracle E-Business Suite CVE-2018-2656 Remote Security Vulnerability

References:

• Oracle Homepage (Oracle)
  
• Oracle Critical Patch Update Advisory - January 2018 (Oracle)