CVE-2015-2657
First published: Thu Jul 16 2015(Updated: )
Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, and 6.3.0 through 6.3.7 allows remote authenticated users to affect confidentiality via unknown vectors related to Business Process Automation.
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Supply Chain Products Suite | =6.1.0 | |
| Oracle Supply Chain Products Suite | =6.2.0 | |
| Oracle Supply Chain Products Suite | =6.3.0 | |
| Oracle Supply Chain Products Suite | =6.3.1 | |
| Oracle Supply Chain Products Suite | =6.3.2 | |
| Oracle Supply Chain Products Suite | =6.3.3 | |
| Oracle Supply Chain Products Suite | =6.3.4 | |
| Oracle Supply Chain Products Suite | =6.3.5 | |
| Oracle Supply Chain Products Suite | =6.3.6 | |
| Oracle Supply Chain Products Suite | =6.3.7 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2015-2657?
CVE-2015-2657 is rated as a high severity vulnerability affecting Oracle Supply Chain Products Suite due to the potential impact on confidentiality.
How do I fix CVE-2015-2657?
To address CVE-2015-2657, you should upgrade to a patched version of Oracle Supply Chain Products Suite as provided in the vendor's security advisory.
Who is affected by CVE-2015-2657?
CVE-2015-2657 affects remote authenticated users of Oracle Supply Chain Products Suite versions 6.1.0 through 6.3.7.
What is the impact of CVE-2015-2657 on my Oracle Supply Chain Products Suite installation?
CVE-2015-2657 could potentially allow remote authenticated users to compromise the confidentiality of your installation.
When was CVE-2015-2657 published?
CVE-2015-2657 was published in July 2015 as part of Oracle's critical patch update.
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/remedy
- agent/severity
- agent/author
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- vendor/oracle
- canonical/oracle supply chain products suite
- version/oracle supply chain products suite/6.1.0
- version/oracle supply chain products suite/6.2.0
- version/oracle supply chain products suite/6.3.0
- version/oracle supply chain products suite/6.3.1
- version/oracle supply chain products suite/6.3.2
- version/oracle supply chain products suite/6.3.3
- version/oracle supply chain products suite/6.3.4
- version/oracle supply chain products suite/6.3.5
- version/oracle supply chain products suite/6.3.6
- version/oracle supply chain products suite/6.3.7