CVE-2014-6565: High severity oracle jd edwards enterpriseone tools vulnerability

Published Jan 21, 2015

Updated

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1.5 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Portal SEC.

Affected Software

1 affected component

ORACLE JD Edwards EnterpriseOne Tools=9.1.5

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html

Event History

Jan 21, 2015

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-6565?

CVE-2014-6565 is classified as having a high severity due to its potential impact on confidentiality, integrity, and availability.

How do I fix CVE-2014-6565?

To fix CVE-2014-6565, upgrade your Oracle JD Edwards EnterpriseOne Tools to a patched version as recommended by Oracle.

Who is affected by CVE-2014-6565?

CVE-2014-6565 affects users of Oracle JD Edwards EnterpriseOne Tools version 9.1.5.

What types of attacks can exploit CVE-2014-6565?

CVE-2014-6565 can be exploited by remote attackers to compromise the confidentiality, integrity, and availability of the system.

When was CVE-2014-6565 disclosed?

CVE-2014-6565 was disclosed in January 2015 as part of Oracle's Critical Patch Update.