CVE-2014-4278: High severity Oracle E-Business Suite vulnerability

Published Oct 15, 2014

Updated

Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Oracle Forms.

Affected Software

5 affected components

Oracle E-Business Suite=12.0.6

Oracle E-Business Suite=12.1.3

Oracle E-Business Suite=12.2.2

Oracle E-Business Suite=12.2.3

Oracle E-Business Suite=12.2.4

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html

Event History

Oct 15, 2014

CVE Published

via MITRE·03:15 PM

Data Sourced

via MITRE·03:15 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-4278?

CVE-2014-4278 has a high severity as it allows remote attackers to affect confidentiality, integrity, and availability.

How do I fix CVE-2014-4278?

To fix CVE-2014-4278, you should apply the latest security patches provided by Oracle for the affected versions of Oracle E-Business Suite.

Which versions of Oracle E-Business Suite are affected by CVE-2014-4278?

CVE-2014-4278 affects Oracle E-Business Suite versions 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4.

What components of Oracle E-Business Suite are impacted by CVE-2014-4278?

CVE-2014-4278 impacts the Oracle Applications Technology Stack component specifically related to Oracle Forms.

Can CVE-2014-4278 be exploited without authentication?

Yes, CVE-2014-4278 can potentially be exploited by remote attackers without authentication through various unspecified vectors.