CVE-2015-2623: Medium severity oracle fusion middleware vulnerability

Published Jul 16, 2015

Updated

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 and 3.1.2, and the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, 12.1.2.0, and 12.1.3.0, allows remote attackers to affect integrity via unknown vectors related to Java Server Faces.

Affected Software

6 affected components

Oracle Fusion Middleware=3.0.1

Oracle Fusion Middleware=3.1.2

Oracle Fusion Middleware=10.3.6

Oracle Fusion Middleware=12.1.1

Oracle Fusion Middleware=12.1.2.0.0

Oracle Fusion Middleware=12.1.3.0.0

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

Event History

Jul 16, 2015

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-2623?

The severity of CVE-2015-2623 is classified as important.

How do I fix CVE-2015-2623?

To fix CVE-2015-2623, apply the latest patches for affected versions of Oracle Fusion Middleware and Oracle WebLogic Server.

What components are affected by CVE-2015-2623?

CVE-2015-2623 affects the Oracle GlassFish Server and Oracle WebLogic Server components in various versions of Oracle Fusion Middleware.

Can CVE-2015-2623 be exploited remotely?

Yes, CVE-2015-2623 allows remote attackers to affect system integrity.

Which versions of Oracle Fusion Middleware are impacted by CVE-2015-2623?

CVE-2015-2623 impacts Oracle Fusion Middleware versions 3.0.1, 3.1.2, 10.3.6, 12.1.1, 12.1.2.0.0, and 12.1.3.0.0.