PT-2014-7238 · Oracle · Oracle E-Business Suite

Published 2014-10-15 · Updated 2015-11-04 · CVE-2014-6472

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, 12.2.3, 12.2.4

Description The issue affects the integrity of the system, related to LOV.

Recommendations For Oracle E-Business Suite version 11.5.10.2, update to a version that includes the fix for this issue. For Oracle E-Business Suite version 12.0.6, update to a version that includes the fix for this issue. For Oracle E-Business Suite version 12.1.3, update to a version that includes the fix for this issue. For Oracle E-Business Suite version 12.2.2, update to a version that includes the fix for this issue. For Oracle E-Business Suite version 12.2.3, update to a version that includes the fix for this issue. For Oracle E-Business Suite version 12.2.4, update to a version that includes the fix for this issue.

Fix

Related Identifiers

CVE-2014-6472

Affected Products

Oracle E-Business Suite

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2014-6472 · Security Note
• http://oracle.com/technetwork/topics/security/cpuoct2014-1972960.html · Vendor Advisory
• http://securitytracker.com/id/1031042 · Note
• http://secunia.com/advisories/61725 · Note
• http://secunia.com/advisories/61781 · Note
• http://securityfocus.com/bid/70457 · Note