受影响系统:
Oracle E-Business Suite 12.1.2
Oracle E-Business Suite 12.1.1
Oracle E-Business Suite 12.0.6
Oracle E-Business Suite 12.0.5
Oracle E-Business Suite 12.0.4
Oracle E-Business Suite 11.5.10.2
Oracle E-Business Suite 11.5.10
描述:
Oracle E-Business Suite是综合的企业业务应用套件。
Oracle E-Business Suite的Oracle Application Object Library、Oracle iStore、Oracle HRMS、Oracle Agile Engineering Data Management、Oracle Application Object Library、Oracle Transportation Management、E-Business Intelligence和Oracle Workflow Cartridge组件中存在多个安全漏洞,远程攻击者可以通过HTTP协议来利用这些漏洞,导致读取敏感信息或完全入侵数据库系统。
<*来源:Oracle
链接:http://secunia.com/advisories/39441/
http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuapr2010.html
http://www.us-cert.gov/cas/techalerts/TA10-103B.html
*>
建议:
厂商补丁:
Oracle
——
Oracle已经为此发布了一个安全公告(cpuapr2010)以及相应补丁:
cpuapr2010:Oracle Critical Patch Update Advisory – April 2010
链接:http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuapr2010.html
0 条评论。