PT-2015-1812 · Oracle · Oracle Applications Framework+3

Publicado 2015-07-16 · Atualizado 2017-09-22 · CVE-2015-1926

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Portal versions 11.1.1.8.0 through 11.1.1.9.0 Oracle Applications Framework versions 12.2.3 through 12.2.4

Description The issue is related to errors in the code of the Oracle WebCenter Portal component in Oracle Fusion Middleware and the Oracle Applications Framework component in Oracle E-Business Suite. It allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Portal. The exploitation of this issue may enable a remote attacker to compromise the confidentiality and integrity of information.

Recommendations For Oracle WebCenter Portal versions 11.1.1.8.0 through 11.1.1.9.0, update to a version that includes the fix for this issue. For Oracle Applications Framework versions 12.2.3 through 12.2.4, update to a version that includes the fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-17

Identificadores relacionados

BDU:2015-11158

CVE-2015-1926

Produtos afetados

Oracle Applications Framework

Oracle E-Business Suite

Oracle Fusion Middleware

Oracle Webcenter Portal

Referências · 6

• https://bdu.fstec.ru/vul/2015-11158 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2015-1926 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1926 · Nota
• http://securitytracker.com/id/1032926 · Nota
• http://oracle.com/technetwork/topics/security/cpujul2015-2367936.html · Aviso do Fabricante
• http://securityfocus.com/bid/75860 · Nota