PT-2007-3512

CVE-2007-2170

·

Published

2007-04-24

·

Updated

2018-10-16

Description by

CVSS 2.0
9.4
High
MetricsAV:N/AC:L/Au:N/C:N/I:C/A:C
The APPLSYS.FND DM NODES package in Oracle E-Business Suite does not check for valid sessions, which allows remote attackers to delete arbitrary nodes. NOTE: due to lack of details from Oracle, it is not clear whether this issue is related to other CVE identifiers such as CVE-2007-2126, CVE-2007-2127, or CVE-2007-2128.
Exploitability
Fix
Researchers
Vendors
Affected products
Related identifiers
CVE-2007-2170
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com