CVE-2014-6572: Medium severity oracle e-business suite vulnerability

Published Jan 21, 2015

Updated

Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors related to List of Values.

Affected Software

9 affected components

Oracle E-Business Suite=12.0.4

Oracle E-Business Suite=12.0.5

Oracle E-Business Suite=12.0.6

Oracle E-Business Suite=12.1.1

Oracle E-Business Suite=12.1.2

Oracle E-Business Suite=12.1.3

Oracle E-Business Suite=12.2.2

Oracle E-Business Suite=12.2.3

Oracle E-Business Suite=12.2.4

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html

Event History

Jan 21, 2015

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-6572?

CVE-2014-6572 has a moderate severity level due to its potential impact on confidentiality and integrity.

How do I fix CVE-2014-6572?

To fix CVE-2014-6572, ensure you apply the latest patches provided by Oracle for the affected versions of E-Business Suite.

Which versions of Oracle E-Business Suite are affected by CVE-2014-6572?

CVE-2014-6572 affects Oracle E-Business Suite versions 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, 12.1.3, 12.2.2, 12.2.3, and 12.2.4.

What components of Oracle E-Business Suite does CVE-2014-6572 impact?

CVE-2014-6572 impacts the Oracle Customer Interaction History component of Oracle E-Business Suite.

Can remote attackers exploit CVE-2014-6572?

Yes, CVE-2014-6572 allows remote attackers to potentially exploit the vulnerability via unknown vectors.