CVE-2015-2663: High severity oracle supply chain products suite vulnerability

Published Jul 16, 2015

Updated

Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, and 6.3.0 through 6.3.7 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Business Process Automation.

Affected Software

10 affected components

Oracle Supply Chain Products Suite=6.1.0

Oracle Supply Chain Products Suite=6.2.0

Oracle Supply Chain Products Suite=6.3.0

Oracle Supply Chain Products Suite=6.3.1

Oracle Supply Chain Products Suite=6.3.2

Oracle Supply Chain Products Suite=6.3.3

Oracle Supply Chain Products Suite=6.3.4

Oracle Supply Chain Products Suite=6.3.5

Oracle Supply Chain Products Suite=6.3.6

Oracle Supply Chain Products Suite=6.3.7

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

Event History

Jul 16, 2015

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-2663?

CVE-2015-2663 has an unspecified severity but allows remote authenticated users to impact confidentiality and integrity.

How do I fix CVE-2015-2663?

To address CVE-2015-2663, apply the latest security patches provided by Oracle for the affected versions of the Oracle Supply Chain Products Suite.

What versions are affected by CVE-2015-2663?

CVE-2015-2663 affects Oracle Supply Chain Products Suite versions 6.1 through 6.3.7.

What components are impacted by CVE-2015-2663?

CVE-2015-2663 specifically impacts the Oracle Transportation Management component within Oracle Supply Chain Products Suite.

Who is at risk due to CVE-2015-2663?

Remote authenticated users of the Oracle Supply Chain Products Suite are at risk due to CVE-2015-2663.