CVE-2014-6583: Medium severity oracle e-business suite vulnerability

Published Jan 21, 2015

Updated

Unspecified vulnerability in the Oracle Marketing component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, and 12.1.3. allows remote attackers to affect confidentiality and integrity via unknown vectors related to Audience.

Affected Software

7 affected components

Oracle E-Business Suite=11.5.10.2

Oracle E-Business Suite=12.0.4

Oracle E-Business Suite=12.0.5

Oracle E-Business Suite=12.0.6

Oracle E-Business Suite=12.1.1

Oracle E-Business Suite=12.1.2

Oracle E-Business Suite=12.1.3

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html

Event History

Jan 21, 2015

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-6583?

CVE-2014-6583 is classified as a high-severity vulnerability due to its potential impact on confidentiality and integrity.

How do I fix CVE-2014-6583?

To fix CVE-2014-6583, ensure that you apply the latest security updates provided by Oracle for the affected versions of Oracle E-Business Suite.

What versions of Oracle E-Business Suite are affected by CVE-2014-6583?

CVE-2014-6583 affects Oracle E-Business Suite versions 11.5.10.2, 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, and 12.1.3.

What are the potential impacts of CVE-2014-6583?

CVE-2014-6583 may allow remote attackers to compromise the confidentiality and integrity of Oracle E-Business Suite data.

Is CVE-2014-6583 being actively exploited?

There is no publicly available information confirming active exploitation of CVE-2014-6583, but it is recommended to mitigate the risk by applying updates.