CVE-2012-3164: Low severity oracle e-business suite vulnerability

Published Oct 17, 2012

Updated

Unspecified vulnerability in the Oracle Marketing component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote authenticated users to affect integrity via unknown vectors related to Publish Item.

Affected Software

5 affected components

Oracle E-Business Suite=11.5.10.2

Oracle E-Business Suite=12.0.6

Oracle E-Business Suite=12.1.1

Oracle E-Business Suite=12.1.2

Oracle E-Business Suite=12.1.3

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html

Event History

Oct 17, 2012

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2012-3164?

The severity of CVE-2012-3164 is considered to be medium as it allows remote authenticated users to affect the integrity of the Oracle E-Business Suite.

How do I fix CVE-2012-3164?

To fix CVE-2012-3164, it is recommended to apply the latest security patches provided by Oracle for affected versions of the E-Business Suite.

Which versions of Oracle E-Business Suite are affected by CVE-2012-3164?

CVE-2012-3164 affects Oracle E-Business Suite versions 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3.

What type of users can exploit CVE-2012-3164?

CVE-2012-3164 can be exploited by remote authenticated users who have access to the Oracle Marketing component.

What does CVE-2012-3164 impact in Oracle E-Business Suite?

CVE-2012-3164 impacts the integrity of the system through unspecified vulnerabilities related to the Publish Item functionality.