CVE-2014-6479: Medium severity oracle e-business suite vulnerability

Published Oct 15, 2014

Updated

Unspecified vulnerability in the Oracle Applications Technology component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote authenticated users to affect confidentiality via vectors related to OC4J Configuration.

Affected Software

3 affected components

Oracle E-Business Suite=11.5.10.2

Oracle E-Business Suite=12.0.6

Oracle E-Business Suite=12.1.3

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html

Event History

Oct 15, 2014

CVE Published

via MITRE·03:15 PM

Data Sourced

via MITRE·03:15 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-6479?

CVE-2014-6479 is classified as a medium severity vulnerability affecting Oracle E-Business Suite.

How do I fix CVE-2014-6479?

To resolve CVE-2014-6479, apply the latest security patches provided by Oracle for your affected version of Oracle E-Business Suite.

What versions of Oracle E-Business Suite are affected by CVE-2014-6479?

CVE-2014-6479 affects Oracle E-Business Suite versions 11.5.10.2, 12.0.6, and 12.1.3.

What type of attack does CVE-2014-6479 facilitate?

CVE-2014-6479 allows remote authenticated users to affect confidentiality through specific vulnerabilities related to OC4J Configuration.

Are there any specific configurations involved with CVE-2014-6479?

CVE-2014-6479 relates to certain OC4J Configuration settings within the Oracle Applications Technology component.