CVE-2014-6498: Medium severity oracle supply chain products suite vulnerability

Published Oct 15, 2014

Updated

Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3, 6.3.1, 6.3.2, 6.3.3, 6.3.4, and 6.3.5 allows remote attackers to affect confidentiality via unknown vectors related to Security.

Affected Software

8 affected components

Oracle Supply Chain Products Suite=6.1.0

Oracle Supply Chain Products Suite=6.2.0

Oracle Supply Chain Products Suite=6.3.0

Oracle Supply Chain Products Suite=6.3.1

Oracle Supply Chain Products Suite=6.3.2

Oracle Supply Chain Products Suite=6.3.3

Oracle Supply Chain Products Suite=6.3.4

Oracle Supply Chain Products Suite=6.3.5

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html

Event History

Oct 15, 2014

CVE Published

via MITRE·10:03 PM

Data Sourced

via MITRE·10:03 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-6498?

The severity of CVE-2014-6498 is classified as a security vulnerability affecting the confidentiality of data.

How do I fix CVE-2014-6498?

To fix CVE-2014-6498, users should update their Oracle Supply Chain Products Suite to the latest version provided by Oracle.

Which versions are affected by CVE-2014-6498?

CVE-2014-6498 affects Oracle Supply Chain Products Suite versions 6.1.0 through 6.3.5.

What type of attacks does CVE-2014-6498 allow?

CVE-2014-6498 allows remote attackers to potentially compromise the confidentiality of sensitive data.

Is there mitigation for CVE-2014-6498?

Mitigation for CVE-2014-6498 involves applying security updates and patches as they become available from Oracle.