CVE-2014-6525: Low severity oracle e-business suite vulnerability

Published Jan 21, 2015

Updated

Unspecified vulnerability in the Oracle Web Applications Desktop Integrator component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote authenticated users to affect integrity via unknown vectors related to Templates.

Affected Software

6 affected components

Oracle E-Business Suite=11.5.10.2

Oracle E-Business Suite=12.0.6

Oracle E-Business Suite=12.1.3

Oracle E-Business Suite=12.2.2

Oracle E-Business Suite=12.2.3

Oracle E-Business Suite=12.2.4

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html

Event History

Jan 21, 2015

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2014-6525?

The severity of CVE-2014-6525 is classified as important due to its potential impact on data integrity.

How do I fix CVE-2014-6525?

To fix CVE-2014-6525, you should apply the latest patch provided by Oracle for your affected version of Oracle E-Business Suite.

What components are affected by CVE-2014-6525?

CVE-2014-6525 specifically affects the Oracle Web Applications Desktop Integrator component in several versions of Oracle E-Business Suite.

Can remote authenticated users exploit CVE-2014-6525?

Yes, remote authenticated users can potentially exploit CVE-2014-6525 to affect the integrity of the system.

What versions of Oracle E-Business Suite are impacted by CVE-2014-6525?

CVE-2014-6525 impacts Oracle E-Business Suite versions 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4.