PT-2015-6686 · Oracle · Adf Faces+1

Publicado 2015-07-16 · Atualizado 2015-07-20 · CVE-2015-4742

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Oracle JDeveloper versions 11.1.1.7.0 through 11.1.2.4.0 Oracle JDeveloper versions 12.1.2.0.0 through 12.1.3.0.0

Description The issue affects the availability of the system, allowing remote attackers to exploit it via vectors related to ADF Faces.

Recommendations For Oracle JDeveloper versions 11.1.1.7.0 through 11.1.2.4.0, update to a version that addresses the issue. For Oracle JDeveloper versions 12.1.2.0.0 through 12.1.3.0.0, update to a version that addresses the issue. As a temporary workaround, consider restricting access to ADF Faces components until a patch is available.

Correção

Identificadores relacionados

CVE-2015-4742

Produtos afetados

Adf Faces

Oracle Jdeveloper

Referências · 3

• http://oracle.com/technetwork/topics/security/cpujul2015-2367936.html · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4742 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-4742 · Nota de Segurança