CVE-2015-2645: Low severity oracle e-business suite vulnerability

Published Jul 16, 2015

Updated

Unspecified vulnerability in the Oracle Web Applications Desktop Integrator component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote authenticated users to affect integrity via unknown vectors.

Affected Software

6 affected components

Oracle E-Business Suite=10.2

Oracle E-Business Suite=11.5

Oracle E-Business Suite=12.0.6

Oracle E-Business Suite=12.1.3

Oracle E-Business Suite=12.2.3

Oracle E-Business Suite=12.2.4

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

Event History

Jul 16, 2015

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-2645?

The severity of CVE-2015-2645 is classified as high due to its potential impact on the integrity of affected systems.

How do I fix CVE-2015-2645?

To fix CVE-2015-2645, you should apply the latest security patches released by Oracle for the affected versions of E-Business Suite.

Which versions of Oracle E-Business Suite are affected by CVE-2015-2645?

CVE-2015-2645 affects Oracle E-Business Suite versions 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4.

Can CVE-2015-2645 be exploited remotely?

Yes, CVE-2015-2645 can be exploited by remote authenticated users.

What kind of attack does CVE-2015-2645 pertain to?

CVE-2015-2645 pertains to integrity attacks that could result from the exploitation of this vulnerability.