CVE-2015-2606: High severity oracle fusion middleware vulnerability

Published Jul 16, 2015

Updated

Unspecified vulnerability in the Oracle Endeca Information Discovery Studio component in Oracle Fusion Middleware 2.2.2, 2.3, 2.4, 3.0, and 3.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Integrator, a different vulnerability than CVE-2015-2602, CVE-2015-2603, CVE-2015-2604, CVE-2015-2605, and CVE-2015-4745.

Affected Software

5 affected components

Oracle Fusion Middleware=2.2.2

Oracle Fusion Middleware=2.3

Oracle Fusion Middleware=2.4

Oracle Fusion Middleware=3.0

Oracle Fusion Middleware=3.1

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

Event History

Jul 16, 2015

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-2606?

CVE-2015-2606 is considered to have a significant severity level due to its potential impact on confidentiality, integrity, and availability.

How do I fix CVE-2015-2606?

To fix CVE-2015-2606, it is recommended to apply the latest security patches provided by Oracle for the affected versions of Fusion Middleware.

Which versions of Oracle Fusion Middleware are affected by CVE-2015-2606?

CVE-2015-2606 affects Oracle Fusion Middleware versions 2.2.2, 2.3, 2.4, 3.0, and 3.1.

What components of Oracle Fusion Middleware are impacted by CVE-2015-2606?

The CVE-2015-2606 vulnerability is specifically found in the Oracle Endeca Information Discovery Studio component.

Can CVE-2015-2606 be exploited remotely?

Yes, CVE-2015-2606 allows remote attackers to exploit the vulnerability through unknown vectors.