PT-2015-6686 · Oracle · Adf Faces+1

Published 2015-07-16 · Updated 2015-07-20 · CVE-2015-4742

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Oracle JDeveloper versions 11.1.1.7.0 through 11.1.2.4.0 Oracle JDeveloper versions 12.1.2.0.0 through 12.1.3.0.0

Description The issue affects the availability of the system, allowing remote attackers to exploit it via vectors related to ADF Faces.

Recommendations For Oracle JDeveloper versions 11.1.1.7.0 through 11.1.2.4.0, update to a version that addresses the issue. For Oracle JDeveloper versions 12.1.2.0.0 through 12.1.3.0.0, update to a version that addresses the issue. As a temporary workaround, consider restricting access to ADF Faces components until a patch is available.

Fix

Related Identifiers

CVE-2015-4742

Affected Products

Adf Faces

Oracle Jdeveloper

References · 3

• http://oracle.com/technetwork/topics/security/cpujul2015-2367936.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-4742 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4742 · Note