CVE-2014-6556: Medium severity oracle e-business suite vulnerability

Published Jan 21, 2015

Updated

Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to ADDDL.

Affected Software

6 affected components

Oracle E-Business Suite=11.5.10.2

Oracle E-Business Suite=12.0.6

Oracle E-Business Suite=12.1.3

Oracle E-Business Suite=12.2.2

Oracle E-Business Suite=12.2.3

Oracle E-Business Suite=12.2.4

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html

Event History

Jan 21, 2015

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-6556?

The severity of CVE-2014-6556 is critical due to its potential impact on confidentiality, integrity, and availability.

How do I fix CVE-2014-6556?

To fix CVE-2014-6556, it is recommended to apply the latest security patches provided by Oracle for affected Oracle E-Business Suite versions.

Who is affected by CVE-2014-6556?

CVE-2014-6556 affects remote authenticated users of Oracle E-Business Suite versions 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4.

What components are impacted by CVE-2014-6556?

CVE-2014-6556 specifically impacts the Oracle Applications DBA component within the Oracle E-Business Suite.

Can CVE-2014-6556 be exploited remotely?

Yes, CVE-2014-6556 can be exploited remotely by authenticated users, which poses a significant security risk.