First published: Wed Oct 15 2014(Updated: )
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote authenticated users to affect confidentiality via vectors related to REST Interface.
Credit: secalert_us@oracle.com
Affected Software | Affected Version | How to fix |
---|---|---|
Oracle E-Business Suite | =12.1.3 | |
Oracle E-Business Suite | =12.2.2 | |
Oracle E-Business Suite | =12.2.3 | |
Oracle E-Business Suite | =12.2.4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2014-6523 is considered to have a moderate severity rating due to its potential impact on confidentiality.
To fix CVE-2014-6523, it is recommended to apply the latest security patches provided by Oracle for affected versions of E-Business Suite.
CVE-2014-6523 affects remote authenticated users of Oracle E-Business Suite versions 12.1.3, 12.2.2, 12.2.3, and 12.2.4.
The impact of CVE-2014-6523 allows remote authenticated users to compromise confidentiality through the REST Interface.
As a temporary measure, it is advisable to limit access to the REST Interface for authenticated users until an official patch is applied.