PT-2015-1703 · Oracle · Oracle Endeca Information Discovery Studio+2

Steven Seeley · Published 2015-07-14 · Updated 2016-12-22 · CVE-2015-4745

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Oracle Endeca Information Discovery Studio (affected versions not specified) Oracle Endeca Information Discovery Integrator ETL Server (affected versions not specified)

Description The issue is related to errors in the code of the Oracle Endeca Information Discovery Studio component of the Oracle Fusion Middleware software platform. Exploitation of this issue may allow a remote attacker to compromise the confidentiality, integrity, and availability of protected information.

Recommendations For Oracle Endeca Information Discovery Studio, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Oracle Endeca Information Discovery Integrator ETL Server, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-17

Related Identifiers

BDU:2015-11049

CVE-2015-4745

ZDI-15-357

Affected Products

Oracle Endeca Information Discovery Integrator Etl Server

Oracle Endeca Information Discovery Studio

Oracle Fusion Middleware

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2015-4745 · Security Note
• http://oracle.com/technetwork/topics/security/cpujul2015-2367936.html · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-15-357 · Security Note
• https://bdu.fstec.ru/vul/2015-11049 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4745 · Note
• http://zerodayinitiative.com/advisories/ZDI-15-357 · Note
• http://securityfocus.com/bid/75750 · Note