CVE-2015-0373: Medium severity oracle database vulnerability

Published Jan 21, 2015

Updated

Unspecified vulnerability in the OJVM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.

Affected Software

5 affected components

Oracle Database Server=11.1.0.7

Oracle Database Server=11.2.0.3

Oracle Database Server=11.2.0.4

Oracle Database Server=12.1.0.1

Oracle Database Server=12.1.0.2

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html

Event History

Jan 21, 2015

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-0373?

CVE-2015-0373 has a high severity level as it allows remote authenticated users to compromise confidentiality, integrity, and availability of the affected systems.

How do I fix CVE-2015-0373?

To fix CVE-2015-0373, apply the latest Oracle Database patches that address this vulnerability.

What versions of Oracle Database are affected by CVE-2015-0373?

CVE-2015-0373 affects Oracle Database versions 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2.

Are remote users able to exploit CVE-2015-0373?

Yes, remote authenticated users can exploit CVE-2015-0373 through unspecified vectors.

What components in Oracle Database are impacted by CVE-2015-0373?

CVE-2015-0373 impacts the OJVM component in the Oracle Database Server.