CVE-2014-6582: Medium severity oracle e-business suite vulnerability

Published Jan 21, 2015

Updated

Unspecified vulnerability in the Oracle HCM Configuration Workbench component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality via unknown vectors related to Rapid Implementation.

Affected Software

10 affected components

Oracle E-Business Suite=11.5.10.2

Oracle E-Business Suite=12.0.4

Oracle E-Business Suite=12.0.5

Oracle E-Business Suite=12.0.6

Oracle E-Business Suite=12.1.1

Oracle E-Business Suite=12.1.2

Oracle E-Business Suite=12.1.3

Oracle E-Business Suite=12.2.2

Oracle E-Business Suite=12.2.3

Oracle E-Business Suite=12.2.4

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html

Event History

Jan 21, 2015

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-6582?

The severity of CVE-2014-6582 has not been specified but it can potentially affect confidentiality.

Which versions of Oracle E-Business Suite are affected by CVE-2014-6582?

CVE-2014-6582 affects Oracle E-Business Suite versions 11.5.10.2, 12.0.4 through 12.0.6, 12.1.1 through 12.1.3, and 12.2.2 through 12.2.4.

How do I fix CVE-2014-6582?

To fix CVE-2014-6582, apply the latest patches provided by Oracle for the affected versions.

What components are affected by CVE-2014-6582?

CVE-2014-6582 affects the Oracle HCM Configuration Workbench component.

Can CVE-2014-6582 be exploited remotely?

Yes, CVE-2014-6582 allows remote attackers to exploit the vulnerability via unknown vectors.