CVE-2015-0435: Medium severity oracle supply chain products suite vulnerability

Published Jan 21, 2015

Updated

Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, and 6.3.5 allows remote authenticated users to affect confidentiality via unknown vectors related to Security.

Affected Software

8 affected components

Oracle Supply Chain Products Suite=6.1.0

Oracle Supply Chain Products Suite=6.2.0

Oracle Supply Chain Products Suite=6.3.0

Oracle Supply Chain Products Suite=6.3.1

Oracle Supply Chain Products Suite=6.3.2

Oracle Supply Chain Products Suite=6.3.3

Oracle Supply Chain Products Suite=6.3.4

Oracle Supply Chain Products Suite=6.3.5

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html

Event History

Jan 21, 2015

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-0435?

The severity of CVE-2015-0435 is currently classified as high due to its potential impact on confidentiality.

How do I fix CVE-2015-0435?

To fix CVE-2015-0435, apply the latest security patches provided by Oracle for affected versions of Oracle Supply Chain Products Suite.

Who is affected by CVE-2015-0435?

CVE-2015-0435 affects remote authenticated users of Oracle Supply Chain Products Suite versions 6.1 to 6.3.5.

What types of vulnerabilities does CVE-2015-0435 involve?

CVE-2015-0435 involves unspecified vulnerabilities that may compromise confidentiality through unknown vectors.

Can CVE-2015-0435 be exploited remotely?

Yes, CVE-2015-0435 can be exploited remotely by authenticated users.