CVE-2015-2630: Medium severity oracle e-business suite vulnerability

Published Jul 16, 2015

Updated

Unspecified vulnerability in the Technology stack component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Applet startup.

Affected Software

4 affected components

Oracle E-Business Suite=10.2

Oracle E-Business Suite=11.5

Oracle E-Business Suite=12.0.6

Oracle E-Business Suite=12.1.3

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

Event History

Jul 16, 2015

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-2630?

CVE-2015-2630 has not been assigned a specific CVSS score, but it is considered a significant risk to the integrity of affected systems.

How do I fix CVE-2015-2630?

To remediate CVE-2015-2630, it is recommended to apply the latest Oracle security patches for the affected versions of Oracle E-Business Suite.

Which versions are impacted by CVE-2015-2630?

CVE-2015-2630 affects Oracle E-Business Suite versions 10.2, 11.5, 12.0.6, and 12.1.3.

What types of attacks does CVE-2015-2630 allow?

CVE-2015-2630 may allow remote attackers to affect the integrity of the application through unspecified vectors related to Applet startup.

Is there a workaround for CVE-2015-2630?

There are no specific workarounds published for CVE-2015-2630, so applying patches is the recommended course of action.