PT-2015-1829 · Oracle · Oracle Endeca Information Discovery Studio+2

Steven Seeley · Published 2015-07-16 · Updated 2016-12-22 · CVE-2015-2602

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Oracle Endeca Information Discovery Studio (affected versions not specified) Oracle Endeca Information Discovery Integrator ETL Server (affected versions not specified)

Description The issue is related to errors in the code of the Oracle Endeca Information Discovery Studio component of the Oracle Fusion Middleware software platform. Exploitation of this issue may allow a remote attacker to compromise the integrity, availability, and confidentiality of information.

Recommendations For Oracle Endeca Information Discovery Studio, at the moment, there is no information about a newer version that contains a fix for this issue. For Oracle Endeca Information Discovery Integrator ETL Server, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Weakness Enumeration

CWE-17

Related Identifiers

BDU:2015-11175

CVE-2015-2602

ZDI-15-355

Affected Products

Oracle Endeca Information Discovery Integrator Etl Server

Oracle Endeca Information Discovery Studio

Oracle Fusion Middleware

References · 7

• https://bdu.fstec.ru/vul/2015-11175 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2015-2602 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-15-355 · Security Note
• http://oracle.com/technetwork/topics/security/cpujul2015-2367936.html · Vendor Advisory
• http://securityfocus.com/bid/75755 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2602 · Note
• http://zerodayinitiative.com/advisories/ZDI-15-355 · Note