CVE-2007-2170: The APPLSYS.FND_DM_NODES package in Oracle E-Business Suite does not check for valid sessions, which allows...

Security readout for executives and security teams

This CVE describes an Oracle E-Business Suite flaw where a package did not validate sessions before allowing node deletion. In business terms, an unauthenticated or improperly authenticated remote actor may be able to delete system nodes, potentially disrupting E-Business Suite operations. The public record lacks affected versions and detailed Oracle context. Organizations running Oracle E-Business Suite around the April 2007 CPU timeframe may be exposed. The bundle does not identify specific versions, configurations, or CPEs, so exposure requires asset and patch verification against Oracle guidance. Prioritize if Oracle E-Business Suite remains in production, especially for finance, HR, procurement, or order management workflows. The issue is old, but legacy enterprise systems often persist and can carry unverified patch gaps. Mitigation focus: Check Oracle April 2007 Critical Patch Update applicability for all E-Business Suite instances.; Apply the relevant Oracle security patches or later supported updates.; Review current Oracle guidance for legacy E-Business Suite deployments..

Prepared

Jun 29, 2026, 06:24 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.