CVE-2015-0422: Medium severity oracle supply chain products suite vulnerability

Published Jan 21, 2015

Updated

Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, and 6.3.5 allows remote authenticated users to affect confidentiality via unknown vectors related to UI Infrastructure.

Affected Software

8 affected components

Oracle Supply Chain Products Suite=6.1.0

Oracle Supply Chain Products Suite=6.2.0

Oracle Supply Chain Products Suite=6.3.0

Oracle Supply Chain Products Suite=6.3.1

Oracle Supply Chain Products Suite=6.3.2

Oracle Supply Chain Products Suite=6.3.3

Oracle Supply Chain Products Suite=6.3.4

Oracle Supply Chain Products Suite=6.3.5

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html

Event History

Jan 21, 2015

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-0422?

CVE-2015-0422 is considered a moderate vulnerability since it allows remote authenticated users to affect confidentiality.

How do I fix CVE-2015-0422?

To address CVE-2015-0422, upgrade to the latest version of Oracle Supply Chain Products Suite as recommended by Oracle.

Which Oracle Supply Chain Products Suite versions are affected by CVE-2015-0422?

CVE-2015-0422 affects Oracle Supply Chain Products Suite versions 6.1.0 through 6.3.5.

What type of vulnerability is CVE-2015-0422 classified as?

CVE-2015-0422 is classified as a confidentiality vulnerability due to its impact on the UI infrastructure.

Are remote unauthenticated users impacted by CVE-2015-0422?

No, CVE-2015-0422 specifically affects remote authenticated users.