CVE-2015-2602: High severity oracle fusion middleware vulnerability

Published Jul 16, 2015

Updated

Unspecified vulnerability in the Oracle Endeca Information Discovery Studio component in Oracle Fusion Middleware 2.2.2, 2.3, 2.4, 3.0, and 3.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Integrator, a different vulnerability than CVE-2015-2603, CVE-2015-2604, CVE-2015-2605, CVE-2015-2606, and CVE-2015-4745.

Affected Software

5 affected components

Oracle Fusion Middleware=2.2.2

Oracle Fusion Middleware=2.3

Oracle Fusion Middleware=2.4

Oracle Fusion Middleware=3.0

Oracle Fusion Middleware=3.1

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

Event History

Jul 16, 2015

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-2602?

CVE-2015-2602 has a moderate severity rating, affecting the confidentiality, integrity, and availability of the Oracle Fusion Middleware.

How do I fix CVE-2015-2602?

To fix CVE-2015-2602, users should update their Oracle Fusion Middleware to the latest version or apply the available patches provided by Oracle.

Which versions of Oracle Fusion Middleware are affected by CVE-2015-2602?

CVE-2015-2602 affects Oracle Fusion Middleware versions 2.2.2, 2.3, 2.4, 3.0, and 3.1.

What components are involved in CVE-2015-2602?

CVE-2015-2602 involves the Oracle Endeca Information Discovery Studio component of Oracle Fusion Middleware.

Can CVE-2015-2602 be exploited remotely?

Yes, CVE-2015-2602 can be exploited remotely by attackers through unknown vectors.