CVE-2015-2603: High severity oracle fusion middleware vulnerability

Published Jul 16, 2015

Updated

Unspecified vulnerability in the Oracle Endeca Information Discovery Studio component in Oracle Fusion Middleware 2.2.2, 2.3, 2.4, 3.0, and 3.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Integrator, a different vulnerability than CVE-2015-2602, CVE-2015-2604, CVE-2015-2605, CVE-2015-2606, and CVE-2015-4745.

Affected Software

5 affected components

Oracle Fusion Middleware=2.2.2

Oracle Fusion Middleware=2.3

Oracle Fusion Middleware=2.4

Oracle Fusion Middleware=3.0

Oracle Fusion Middleware=3.1

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

Event History

Jul 16, 2015

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-2603?

CVE-2015-2603 is considered a critical vulnerability affecting Oracle Fusion Middleware.

How do I fix CVE-2015-2603?

To address CVE-2015-2603, you should apply the latest security patch provided by Oracle for affected versions of Fusion Middleware.

Which versions of Oracle Fusion Middleware are affected by CVE-2015-2603?

CVE-2015-2603 affects Oracle Fusion Middleware versions 2.2.2, 2.3, 2.4, 3.0, and 3.1.

What are the potential impacts of CVE-2015-2603?

CVE-2015-2603 may affect the confidentiality, integrity, and availability of systems using the affected Oracle Fusion Middleware.

Can CVE-2015-2603 be exploited remotely?

Yes, CVE-2015-2603 can potentially be exploited by remote attackers.