First published: Wed Jan 21 2015(Updated: )
Unspecified vulnerability in the Oracle Customer Intelligence component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Extract/Load Programs.
Credit: secalert_us@oracle.com
Affected Software | Affected Version | How to fix |
---|---|---|
Oracle E-Business Suite | =11.5.10.2 | |
Oracle E-Business Suite | =12.0.4 | |
Oracle E-Business Suite | =12.0.5 | |
Oracle E-Business Suite | =12.0.6 | |
Oracle E-Business Suite | =12.1.1 | |
Oracle E-Business Suite | =12.1.2 | |
Oracle E-Business Suite | =12.1.3 | |
Oracle E-Business Suite | =12.2.2 | |
Oracle E-Business Suite | =12.2.3 | |
Oracle E-Business Suite | =12.2.4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2014-6581 has a severity rating that indicates it may significantly impact confidentiality and integrity.
To mitigate CVE-2014-6581, apply the latest security patches provided by Oracle for affected versions of E-Business Suite.
CVE-2014-6581 affects Oracle E-Business Suite versions 11.5.10.2 and 12.0.4 through 12.2.4.
CVE-2014-6581 can allow remote attackers to compromise the confidentiality and integrity of the system.
As long as you regularly apply security updates, the risk associated with CVE-2014-6581 should be mitigated.