CVE-2015-0431: Medium severity oracle supply chain products suite vulnerability

Published Jan 21, 2015

Updated

Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3.0 6.3.1, 6.3.2, 6.3.4, and 6.3.5 allows remote attackers to affect integrity via unknown vectors related to UI Infrastructure.

Affected Software

7 affected components

Oracle Supply Chain Products Suite=6.1.0

Oracle Supply Chain Products Suite=6.2.0

Oracle Supply Chain Products Suite=6.3.0

Oracle Supply Chain Products Suite=6.3.1

Oracle Supply Chain Products Suite=6.3.2

Oracle Supply Chain Products Suite=6.3.4

Oracle Supply Chain Products Suite=6.3.5

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html

Event History

Jan 21, 2015

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-0431?

CVE-2015-0431 is considered to have a moderate severity level due to its potential impact on data integrity.

How do I fix CVE-2015-0431?

To fix CVE-2015-0431, it is recommended to apply the latest security patches provided by Oracle for the affected versions.

Which versions of Oracle Supply Chain Products Suite are affected by CVE-2015-0431?

CVE-2015-0431 affects Oracle Supply Chain Products Suite versions 6.1.0 through 6.3.5.

What types of attacks are possible with CVE-2015-0431?

CVE-2015-0431 allows remote attackers to potentially affect the integrity of the application through unspecified vectors.

Is there a workaround for CVE-2015-0431?

Currently, no documented workaround is available for CVE-2015-0431; the best mitigation is to apply the appropriate updates.