CVE-2015-1926: Medium severity oracle e-business suite vulnerability

Published Jul 16, 2015

Updated

Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.8.0 and 11.1.1.9.0, and the Oracle Applications Framework component in Oracle E-Business Suite 12.2.3 and 12.2.4, allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Portal.

Affected Software

4 affected components

Oracle E-Business Suite=12.2.3

Oracle E-Business Suite=12.2.4

Oracle Fusion Middleware=11.1.1.8.0

Oracle Fusion Middleware=11.1.1.9.0

Event History

Jul 16, 2015

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-1926?

The severity of CVE-2015-1926 is classified as medium, affecting confidentiality and integrity.

How do I fix CVE-2015-1926?

To fix CVE-2015-1926, users should apply the latest security patches provided by Oracle for the affected products.

Who is affected by CVE-2015-1926?

CVE-2015-1926 affects remote authenticated users of Oracle Fusion Middleware 11.1.1.8.0, 11.1.1.9.0, and Oracle E-Business Suite 12.2.3, 12.2.4.

What can exploitation of CVE-2015-1926 lead to?

Exploitation of CVE-2015-1926 can lead to unauthorized access affecting data confidentiality and integrity.

When was CVE-2015-1926 disclosed?

CVE-2015-1926 was disclosed in July 2015 as part of Oracle's critical patch update.