PT-2014-7292 · Oracle · Oracle E-Business Suite

Publicado 2014-10-15 · Atualizado 2015-11-04 · CVE-2014-6561

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.0.4, 12.0.6, 12.1.1, 12.1.2, 12.1.3, 12.2.2, 12.2.3, 12.2.4

Description The issue affects the confidentiality of the system, related to Separate Remittance Advice in the Oracle Payments component. The exact vectors of the attack are unknown.

Recommendations For Oracle E-Business Suite version 12.0.4, update to a fixed version. For Oracle E-Business Suite version 12.0.6, update to a fixed version. For Oracle E-Business Suite version 12.1.1, update to a fixed version. For Oracle E-Business Suite version 12.1.2, update to a fixed version. For Oracle E-Business Suite version 12.1.3, update to a fixed version. For Oracle E-Business Suite version 12.2.2, update to a fixed version. For Oracle E-Business Suite version 12.2.3, update to a fixed version. For Oracle E-Business Suite version 12.2.4, update to a fixed version.

Correção

Identificadores relacionados

CVE-2014-6561

Produtos afetados

Oracle E-Business Suite

Referências · 5

• http://securityfocus.com/bid/70454 · Nota
• http://securitytracker.com/id/1031042 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-6561 · Nota de Segurança
• http://secunia.com/advisories/61781 · Nota
• http://oracle.com/technetwork/topics/security/cpuoct2014-1972960.html · Aviso do Fabricante