CVEvulnerability

CVE-2003-1116

5.0 MEDIUM Published 2003-12-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2003-12-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N

Description

The communications protocol for the Report Review Agent (RRA), aka FND File Server (FNDFS) program, in Oracle E-Business Suite 10.7, 11.0, and 11.5.1 to 11.5.8 allows remote attackers to bypass authentication and obtain sensitive information from the Oracle Applications Concurrent Manager by spoofing requests to the TNS Listener.

Affected configurations

• oracle e-business suite 10.7 • oracle e-business suite 11.0 • oracle e-business suite 11.1 • oracle e-business suite 11.2 • oracle e-business suite 11.3 • oracle e-business suite 11.4 • oracle e-business suite 11.5 • oracle e-business suite 11.6 • oracle e-business suite 11.7 • oracle e-business suite 11.8

References