CVE-2003-1116

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2003-12-31 · updated 2026-06-16

Description

The communications protocol for the Report Review Agent (RRA), aka FND File Server (FNDFS) program, in Oracle E-Business Suite 10.7, 11.0, and 11.5.1 to 11.5.8 allows remote attackers to bypass authentication and obtain sensitive information from the Oracle Applications Concurrent Manager by spoofing requests to the TNS Listener.

Affected products

Oracle E-Business Suite: 10.7, 11.0, 11.1, 11.2, 11.3, 11.4 (+4)

References

http://marc.info/?l=bugtraq&m=105012832418415&w=2
http://otn.oracle.com/deploy/security/pdf/2003alert53.pdf
http://securitytracker.com/id?1006550
http://www.integrigy.com/alerts/FNDFS_Vulnerability.htm
http://www.kb.cert.org/vuls/id/168873
http://www.securityfocus.com/bid/7325
https://exchange.xforce.ibmcloud.com/vulnerabilities/11768
http://marc.info/?l=bugtraq&m=105012832418415&w=2
http://otn.oracle.com/deploy/security/pdf/2003alert53.pdf
http://securitytracker.com/id?1006550
http://www.integrigy.com/alerts/FNDFS_Vulnerability.htm
http://www.kb.cert.org/vuls/id/168873

Get alerted when CVE-2003-1116 or the next vulnerability affects your stack