PT-2015-2481 · Oracle · Oracle E-Business Suite
Publicado
2015-10-21
·
Atualizado
2016-12-24
·
CVE-2015-4898
CVSS v2.0
4.0
Média
| Vetor | AV:N/AC:L/Au:S/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
Oracle E-Business Suite versions 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, 12.2.4
Description
The issue is related to an unspecified vulnerability in the Oracle Applications Framework component, allowing remote authenticated users to affect data integrity. This is achieved via vectors related to Diagnostics and DMZ. The vulnerability is associated with coding errors, which can be exploited by an attacker to modify data.
Recommendations
For Oracle E-Business Suite version 11.5.10.2, update to a version that includes the fix for this issue.
For Oracle E-Business Suite version 12.0.6, update to a version that includes the fix for this issue.
For Oracle E-Business Suite version 12.1.3, update to a version that includes the fix for this issue.
For Oracle E-Business Suite version 12.2.3, update to a version that includes the fix for this issue.
For Oracle E-Business Suite version 12.2.4, update to a version that includes the fix for this issue.
As a temporary workaround, consider restricting access to the Diagnostics and DMZ components until a patch is available.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Oracle E-Business Suite