First published: Wed Jan 21 2015(Updated: )
Unspecified vulnerability in the Oracle Telecommunications Billing Integrator component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via unknown vectors related to OA Based UI for Bill Summary.
Credit: secalert_us@oracle.com
Affected Software | Affected Version | How to fix |
---|---|---|
Oracle E-Business Suite | =11.5.10.2 | |
Oracle E-Business Suite | =12.0.4 | |
Oracle E-Business Suite | =12.0.5 | |
Oracle E-Business Suite | =12.0.6 | |
Oracle E-Business Suite | =12.1.1 | |
Oracle E-Business Suite | =12.1.2 | |
Oracle E-Business Suite | =12.1.3 | |
Oracle E-Business Suite | =12.2.2 | |
Oracle E-Business Suite | =12.2.3 | |
Oracle E-Business Suite | =12.2.4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2015-0380 has been classified as a medium severity vulnerability affecting multiple versions of Oracle E-Business Suite.
To mitigate CVE-2015-0380, users should apply the latest security patches provided by Oracle for their specific version of the E-Business Suite.
CVE-2015-0380 affects installations of Oracle E-Business Suite versions 11.5.10.2 through 12.2.4.
CVE-2015-0380 allows remote attackers to potentially affect the integrity of data through unspecified vectors.
While no specific workaround is documented for CVE-2015-0380, applying Oracle's security updates is the recommended approach.