CVE-2015-2618: Input Validation

Published Jul 16, 2015

Updated

Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote authenticated users to affect integrity via unknown vectors related to Input validation.

Affected Software

6 affected components

Oracle E-Business Suite=10.2

Oracle E-Business Suite=11.5

Oracle E-Business Suite=12.0.6

Oracle E-Business Suite=12.1.3

Oracle E-Business Suite=12.2.3

Oracle E-Business Suite=12.2.4

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

Event History

Jul 16, 2015

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-2618?

CVE-2015-2618 has a moderate severity level due to its potential impact on the integrity of the application.

How do I fix CVE-2015-2618?

To fix CVE-2015-2618, you should apply the latest security patches provided by Oracle for affected versions of E-Business Suite.

Which versions of Oracle E-Business Suite are affected by CVE-2015-2618?

CVE-2015-2618 affects Oracle E-Business Suite versions 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4.

Who can exploit CVE-2015-2618?

CVE-2015-2618 can be exploited by remote authenticated users who can manipulate input validation.

What type of vulnerability is CVE-2015-2618?

CVE-2015-2618 is an unspecified input validation vulnerability that can affect application integrity.