Rewterz Threat Advisory – Oracle Siebel CRM Update for Multiple Vulnerabilities
April 18, 2019Rewterz Threat Alert – Gustuff Banking Botnet Targeting Financial Institutions
April 18, 2019Severity
Medium
Analysis Summary
CVE-2019-2707 & CVE-2019-2700
1) An error within the “Application Search” subcomponent can be exploited to disclose, update, insert, or delete certain data.
2) An error within the “Enterprise Learning Mgmt” subcomponent can be exploited to update, insert, or delete certain data.
Impact
Affected Vendors
Oracle
Affected Products
Oracle PeopleSoft Enterprise Learning Management 9.2.
Remediation
Apply update.
Rewterz publishes threat advisories ahead of mainstream cybersecurity media, informed by an AI-Native Autonomous SOC that sees regional threat actor activity in real time. Subscribe to receive each new advisory as it publishes, plus a monthly Middle East threat landscape brief drawn from our own SOC telemetry. For teams evaluating their detection coverage, a 30-minute consultation with a senior analyst is also available, at your pace, when you're ready.
