CVE-2015-2605: High severity oracle fusion middleware vulnerability

Published Jul 16, 2015

Updated

Unspecified vulnerability in the Oracle Endeca Information Discovery Studio component in Oracle Fusion Middleware 2.2.2, 2.3, 2.4, 3.0, and 3.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Integrator, a different vulnerability than CVE-2015-2602, CVE-2015-2603, CVE-2015-2604, CVE-2015-2606, and CVE-2015-4745.

Affected Software

5 affected components

Oracle Fusion Middleware=2.2.2

Oracle Fusion Middleware=2.3

Oracle Fusion Middleware=2.4

Oracle Fusion Middleware=3.0

Oracle Fusion Middleware=3.1

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

Event History

Jul 16, 2015

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-2605?

CVE-2015-2605 has been classified as a critical vulnerability affecting confidentiality, integrity, and availability.

How do I fix CVE-2015-2605?

To mitigate the risks associated with CVE-2015-2605, users should upgrade to the latest version of Oracle Fusion Middleware that includes the necessary security patches.

Which versions of Oracle Fusion Middleware are affected by CVE-2015-2605?

CVE-2015-2605 affects Oracle Fusion Middleware versions 2.2.2, 2.3, 2.4, 3.0, and 3.1.

Can CVE-2015-2605 be exploited remotely?

Yes, CVE-2015-2605 can be exploited remotely by attackers through unknown vectors.

What components of Oracle Fusion Middleware does CVE-2015-2605 impact?

CVE-2015-2605 specifically impacts the Oracle Endeca Information Discovery Studio component within Oracle Fusion Middleware.