PT-2015-3874 · Oracle · Jd Edwards Enterpriseone Tools+1

Publicado 2015-01-21 · Atualizado 2016-06-24 · CVE-2014-6565

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Oracle JD Edwards Products version 9.1.5

Description The issue affects confidentiality, integrity, and availability. It can be exploited remotely via vectors related to Portal SEC in the JD Edwards EnterpriseOne Tools component.

Recommendations For Oracle JD Edwards Products version 9.1.5, update to a version that includes a fix for this issue, as no specific workaround is provided.

Correção

Identificadores relacionados

CVE-2014-6565

Produtos afetados

Jd Edwards Enterpriseone Tools

Jd Edwards Products

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2014-6565 · Nota de Segurança
• http://securitytracker.com/id/1031573 · Nota
• http://oracle.com/technetwork/topics/security/cpujan2015-1972971.html · Aviso do Fabricante