CVE-2014-2482: Medium severity oracle e-business suite vulnerability

Published Jul 17, 2014

Updated

Unspecified vulnerability in the Oracle Concurrent Processing component in Oracle E-Business Suite 12.1.3, 12.2.2, and 12.2.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

Affected Software

3 affected components

Oracle E-Business Suite=12.1.3

Oracle E-Business Suite=12.2.2

Oracle E-Business Suite=12.2.3

Event History

Jul 17, 2014

CVE Published

via MITRE·02:36 AM

Data Sourced

via MITRE·02:36 AM

Description

Frequently Asked Questions

What is the severity of CVE-2014-2482?

CVE-2014-2482 has a high severity level as it allows remote authenticated users to impact confidentiality and integrity.

How do I fix CVE-2014-2482?

To fix CVE-2014-2482, apply the latest security patches and updates provided by Oracle for affected versions of the E-Business Suite.

Which versions of Oracle E-Business Suite are affected by CVE-2014-2482?

CVE-2014-2482 affects Oracle E-Business Suite versions 12.1.3, 12.2.2, and 12.2.3.

What type of users can exploit CVE-2014-2482?

Only remote authenticated users with access to the Oracle Concurrent Processing component can exploit CVE-2014-2482.

Is there a known mitigation strategy for CVE-2014-2482?

Currently, the best mitigation strategy for CVE-2014-2482 is to ensure prompt installation of available security updates and adhere to best security practices.