CVE-2015-0399: Medium severity oracle fusion middleware vulnerability

Published Jan 21, 2015

Updated

Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 10.1.3.4.2 and 11.1.1.7 allows remote authenticated users to affect confidentiality via unknown vectors related to Analytics Web General.

Affected Software

2 affected components

Oracle Fusion Middleware=10.1.3.4.2

Oracle Fusion Middleware=11.1.1.7.0

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html

Event History

Jan 21, 2015

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-0399?

The severity of CVE-2015-0399 is classified as a medium risk due to its potential impact on confidentiality.

How do I fix CVE-2015-0399?

To fix CVE-2015-0399, it is recommended to apply the latest security patches provided by Oracle for affected versions of Oracle Fusion Middleware.

Who is affected by CVE-2015-0399?

CVE-2015-0399 affects remote authenticated users with access to Oracle Business Intelligence Enterprise Edition in specific versions of Oracle Fusion Middleware.

What versions are vulnerable to CVE-2015-0399?

The vulnerable versions for CVE-2015-0399 are Oracle Fusion Middleware 10.1.3.4.2 and 11.1.1.7.0.

What type of attacks can exploit CVE-2015-0399?

CVE-2015-0399 can potentially be exploited by authenticated remote users to affect the confidentiality of sensitive data through unknown vectors.