CVE-2010-0857

Vulnerability

CVE-2010-0857 is an unspecified vulnerability in the Oracle Workflow Cartridge component of Oracle E-Business Suite version 11.5.10.2 [1]. The official advisory does not provide technical details, but it is known to affect the integrity of data through unknown vectors.

Exploitation

The vulnerability can be exploited by a remote authenticated user [1]. No other prerequisites, such as specific network position or user interaction, are mentioned in the available references. The exploitation vectors are unspecified, so the exact steps are not known from public sources.

Impact

Successful exploitation allows an authenticated remote attacker to affect the integrity of the Oracle E-Business Suite system [1]. The official description from Oracle confirms that the impact is on integrity only, with no mention of confidentiality or availability compromise.

Mitigation

Oracle released a Critical Patch Update (CPU) in April 2010 to address this vulnerability [1]. Administrators should apply the relevant patch from Oracle's April 2010 CPU as soon as possible. No workarounds are documented. The vulnerability is not known to be on the CISA Known Exploited Vulnerabilities (KEV) catalog as of the publication date.