Thousands of Enterprises At Risk Due to Oracle EBS Critical Flaws

guest · Nov 20, 2019

Thousands of Enterprises At Risk Due to Oracle EBS Critical Flaws
November 20, 2019
https://www.bleepingcomputer.com/ne...ses-at-risk-due-to-oracle-ebs-critical-flaws/

Two critical security vulnerabilities discovered in Oracle's E-Business Suite (EBS) could allow potential attackers to take full control over a company's entire enterprise resource planning (ERP) solution.

"Over 21,000 global organizations use Oracle EBS for financial management, customer relationship management (CRM), supply chain management (SCM), human capital management (HCM), logistics, procurement and more," according to Onapsis Research Labs.
Critical ERP vulnerabilities leading to financial fraud
The Oracle EBS improper access control flaws come with CVSS scores of 9.9 out of 10, and are tracked as CVE-2019-2638 (in the Consolidation Hierarchy Viewer component of the Oracle General Ledger) and CVE-2019-2633 (in the Messages component of the Oracle Work in Process product).

At the moment, Onapsis' research team estimates that approximately 50% of all Oracle EBS customers have not yet deployed the patches.
The Onapsis threat researchers detail the following two possible scenarios allowing attackers to leverage the flaws to pursue financial fraud: [...]
Click to expand...

guest · Jun 17, 2020

Oracle E-Business Suite Flaws Let Hackers Hijack Business Operations
June 16, 2020
https://thehackernews.com/2020/06/oracle-e-business-suite.html

If your business operations and security of sensitive data rely on Oracle's E-Business Suite (EBS), make sure you recently updated and are running the latest available version of the software.

In a report released by enterprise cybersecurity firm Onapsis and shared with The Hacker News, the firm today disclosed technical details for vulnerabilities it reported in Oracle's E-Business Suite (EBS), an integrated group of applications designed to automate CRM, ERP, and SCM operations for organizations.
The two vulnerabilities, dubbed "BigDebIT" and rated a CVSS score of 9.9, were patched by Oracle in a critical patch update (CPU) pushed out earlier this January. But the company said an estimated 50 percent of Oracle EBS customers have not deployed the patches to date.
Click to expand...

According to the researchers, "an unauthenticated hacker could perform an automated exploit on the General Ledger module to extract assets from a company (such as cash) and modify accounting tables, without leaving a trace."

"Successful exploitation of this vulnerability would allow an attacker to steal financial data and cause delays in any financial reporting related to the company's compliance processes," it added.
Click to expand...

guest · Nov 11, 2020

Most UK businesses using Oracle E-Business Suite are running old systems
November 10, 2020
https://www.helpnetsecurity.com/2020/11/10/oracle-e-business-suite-old-systems/

The majority of UK businesses using Oracle E-Business Suite (EBS) are running on old versions of the business critical ERP system, according to a Claremont study.

Of the 154 IT professionals polled, 64% revealed they are running on an earlier version that the current R12.2. With Oracle cutting off premier support to EBS 12.1 in December 2021, this leaves these businesses facing potential legislative and security issues if they fail to upgrade prior to the deadline.
58% of the businesses polled claimed they did intend on making the upgrade to R12.2.

“Businesses intent on upgrading to EBS R12.2 face a race against the clock in order to get it done in time. There is now just 14 months until the deadline, and while that may seem like a long time, given that the survey indicates almost two-thirds of businesses are currently looking to upgrade, there is likely to be resource scarcity in the marketplace. [...]”
Click to expand...

Log in or Sign up

Thousands of Enterprises At Risk Due to Oracle EBS Critical Flaws

guest Guest

guest Guest

guest Guest

Log in or Sign up

Thousands of Enterprises At Risk Due to Oracle EBS Critical Flaws

guest Guest

guest Guest

guest Guest

Useful Searches