受影响系统:
Oracle E-Business Suite 12.1.2
Oracle E-Business Suite 12.1.1
Oracle E-Business Suite 12.0.6
Oracle E-Business Suite 12.0.5
Oracle E-Business Suite 12.0.4
Oracle E-Business Suite 11.5.10.2
Oracle E-Business Suite 11.5.10
描述:
Oracle E-Business Suite是综合的企业业务应用套件。
Oracle E-Business Suite的Oracle Advanced Product Catalog、Oracle Applications Framework、Oracle Applications Manager、Oracle Knowledge Management组件中存在多个安全漏洞,远程攻击者可以通过HTTP协议来利用这些漏洞,导致读取敏感信息或完全入侵数据库系统。
<*来源:Oracle
链接:http://secunia.com/advisories/40599/
http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpujul2010.html
http://www.us-cert.gov/cas/techalerts/TA10-194B.html
*>
建议:
厂商补丁:
Oracle
——
Oracle已经为此发布了一个安全公告(cpujul2010)以及相应补丁:
cpujul2010:Oracle Critical Patch Update Advisory – July 2010
链接:http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpujul2010.html
0 条评论。