CVE-2015-0380: Medium severity oracle e-business suite vulnerability

Published Jan 21, 2015

Updated

Unspecified vulnerability in the Oracle Telecommunications Billing Integrator component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via unknown vectors related to OA Based UI for Bill Summary.

Affected Software

10 affected components

Oracle E-Business Suite=11.5.10.2

Oracle E-Business Suite=12.0.4

Oracle E-Business Suite=12.0.5

Oracle E-Business Suite=12.0.6

Oracle E-Business Suite=12.1.1

Oracle E-Business Suite=12.1.2

Oracle E-Business Suite=12.1.3

Oracle E-Business Suite=12.2.2

Oracle E-Business Suite=12.2.3

Oracle E-Business Suite=12.2.4

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html

Event History

Jan 21, 2015

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-0380?

CVE-2015-0380 has been classified as a medium severity vulnerability affecting multiple versions of Oracle E-Business Suite.

How do I fix CVE-2015-0380?

To mitigate CVE-2015-0380, users should apply the latest security patches provided by Oracle for their specific version of the E-Business Suite.

Who is affected by CVE-2015-0380?

CVE-2015-0380 affects installations of Oracle E-Business Suite versions 11.5.10.2 through 12.2.4.

What type of attacks does CVE-2015-0380 allow?

CVE-2015-0380 allows remote attackers to potentially affect the integrity of data through unspecified vectors.

Is there a workaround for CVE-2015-0380?

While no specific workaround is documented for CVE-2015-0380, applying Oracle's security updates is the recommended approach.