CVE-2014-6561: Medium severity oracle e-business suite vulnerability

Published Oct 15, 2014

Updated

Unspecified vulnerability in the Oracle Payments component in Oracle E-Business Suite 12.0.4, 12.0.6, 12.1.1, 12.1.2, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality via unknown vectors related to Separate Remittance Advice.

Affected Software

8 affected components

Oracle E-Business Suite=12.0.4

Oracle E-Business Suite=12.0.6

Oracle E-Business Suite=12.1.1

Oracle E-Business Suite=12.1.2

Oracle E-Business Suite=12.1.3

Oracle E-Business Suite=12.2.2

Oracle E-Business Suite=12.2.3

Oracle E-Business Suite=12.2.4

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html

Event History

Oct 15, 2014

CVE Published

via MITRE·10:03 PM

Data Sourced

via MITRE·10:03 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-6561?

CVE-2014-6561 has not been assigned a specific severity rating, but it affects the confidentiality of data in affected Oracle E-Business Suite versions.

How do I fix CVE-2014-6561?

To mitigate CVE-2014-6561, it is recommended to apply the latest security patches provided by Oracle for the affected versions of E-Business Suite.

What versions of Oracle E-Business Suite are affected by CVE-2014-6561?

CVE-2014-6561 affects Oracle E-Business Suite versions 12.0.4, 12.0.6, 12.1.1, 12.1.2, 12.1.3, 12.2.2, 12.2.3, and 12.2.4.

Can CVE-2014-6561 be exploited remotely?

Yes, CVE-2014-6561 allows remote attackers to potentially affect the confidentiality of data.

What is the nature of the vulnerability identified in CVE-2014-6561?

CVE-2014-6561 pertains to an unspecified vulnerability related to Separate Remittance Advice within the Oracle Payments component.