Database maker Oracle warned customers on Wednesday of three new flaws in its products, and reiterated its warning to businesses of a fourth flaw that uses the company's application server.
The two most serious vulnerabilities were in the firm's E-Business Suite, Oracle's set of server applications for managing everything from accounting to Intranets. Both were given the highest of three threat ratings assigned by Oracle to its products' vulnerabilities.
The flaw in the company's database server could allow an attacker to execute code against the system, but only if the person already has database-administrator rights to the system. The main concern with this type of an attack is that a company insider could gain a higher level of privilege on the server.
Oracle also reiterated a warning about several flaws in the application server that could allow people to read files or to look at the source code of Java server pages.
|