PT-2015-1812 · Oracle · Oracle Applications Framework+3

Published 2015-07-16 · Updated 2017-09-22 · CVE-2015-1926

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Portal versions 11.1.1.8.0 through 11.1.1.9.0 Oracle Applications Framework versions 12.2.3 through 12.2.4

Description The issue is related to errors in the code of the Oracle WebCenter Portal component in Oracle Fusion Middleware and the Oracle Applications Framework component in Oracle E-Business Suite. It allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Portal. The exploitation of this issue may enable a remote attacker to compromise the confidentiality and integrity of information.

Recommendations For Oracle WebCenter Portal versions 11.1.1.8.0 through 11.1.1.9.0, update to a version that includes the fix for this issue. For Oracle Applications Framework versions 12.2.3 through 12.2.4, update to a version that includes the fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-17

Related Identifiers

BDU:2015-11158

CVE-2015-1926

Affected Products

Oracle Applications Framework

Oracle E-Business Suite

Oracle Fusion Middleware

Oracle Webcenter Portal

References · 6

• https://bdu.fstec.ru/vul/2015-11158 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2015-1926 · Security Note
• http://oracle.com/technetwork/topics/security/cpujul2015-2367936.html · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1926 · Note
• http://securitytracker.com/id/1032926 · Note
• http://securityfocus.com/bid/75860 · Note