CVE-2019-2445: Vulnerability in the Oracle Content Manager component of Oracle E-Business Suite (subcomponent: Cover Letter).

Security readout for executives and security teams

CVE-2019-2445 affects Oracle Content Manager within Oracle E-Business Suite. An unauthenticated attacker reachable over HTTP could gain access to sensitive Content Manager data and alter some data, but the attack requires another person's interaction. The main business risk is unauthorized data exposure and limited data tampering in supported EBS environments. Exposure is most likely where Oracle E-Business Suite runs affected Content Manager versions and relevant HTTP access is reachable by untrusted users or external networks. Environments not using Content Manager may still need review because Oracle notes attacks can significantly impact additional products. Treat this as a high-priority legacy Oracle E-Business Suite issue if affected systems remain in use. It can expose critical business data without attacker authentication, although it requires user interaction and the bundle does not confirm active exploitation. Mitigation focus: Review Oracle's January 2019 Critical Patch Update and apply the relevant Oracle E-Business Suite fixes.; Restrict HTTP access to Oracle E-Business Suite components to trusted networks where operationally possible.; Prioritize affected internet-facing or partner-facing EBS deployments for remediation review..

Prepared

Jun 7, 2026, 04:57 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.