CVE-2014-6581: Medium severity oracle e-business suite vulnerability

Published Jan 21, 2015

Updated

Unspecified vulnerability in the Oracle Customer Intelligence component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Extract/Load Programs.

Affected Software

10 affected components

Oracle E-Business Suite=11.5.10.2

Oracle E-Business Suite=12.0.4

Oracle E-Business Suite=12.0.5

Oracle E-Business Suite=12.0.6

Oracle E-Business Suite=12.1.1

Oracle E-Business Suite=12.1.2

Oracle E-Business Suite=12.1.3

Oracle E-Business Suite=12.2.2

Oracle E-Business Suite=12.2.3

Oracle E-Business Suite=12.2.4

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html

Event History

Jan 21, 2015

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-6581?

CVE-2014-6581 has a severity rating that indicates it may significantly impact confidentiality and integrity.

How do I fix CVE-2014-6581?

To mitigate CVE-2014-6581, apply the latest security patches provided by Oracle for affected versions of E-Business Suite.

Which versions of Oracle E-Business Suite are affected by CVE-2014-6581?

CVE-2014-6581 affects Oracle E-Business Suite versions 11.5.10.2 and 12.0.4 through 12.2.4.

What type of attacks can CVE-2014-6581 facilitate?

CVE-2014-6581 can allow remote attackers to compromise the confidentiality and integrity of the system.

Is CVE-2014-6581 still a risk if my Oracle E-Business Suite is up to date?

As long as you regularly apply security updates, the risk associated with CVE-2014-6581 should be mitigated.