CVE-2015-2607: Medium severity oracle commerce vulnerability

Published Jul 16, 2015

Updated

Unspecified vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component in Oracle Commerce Platform 3.0.2, 3.1.1, 3.1.2, 11.0, and 11.1 allows remote attackers to affect confidentiality via unknown vectors related to Content Acquisition System.

Affected Software

5 affected components

Oracle Commerce Platform=3.0.2

Oracle Commerce Platform=3.1.1

Oracle Commerce Platform=3.1.2

Oracle Commerce Platform=11.0

Oracle Commerce Platform=11.1

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

Event History

Jul 16, 2015

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-2607?

CVE-2015-2607 has not been assigned a specific CVSS score, but it allows remote attackers to compromise confidentiality.

How do I fix CVE-2015-2607?

To fix CVE-2015-2607, you should apply the latest security patches from Oracle for the affected versions of Oracle Commerce Platform.

Which versions are affected by CVE-2015-2607?

CVE-2015-2607 affects Oracle Commerce Platform versions 3.0.2, 3.1.1, 3.1.2, 11.0, and 11.1.

Can CVE-2015-2607 be exploited remotely?

Yes, CVE-2015-2607 allows remote attackers to affect the confidentiality of the affected systems.

What components are impacted by CVE-2015-2607?

CVE-2015-2607 impacts the Oracle Commerce Guided Search and Oracle Commerce Experience Manager components.