CVE-2015-4728: Medium severity oracle e-business suite vulnerability

Published Jul 16, 2015

Updated

Unspecified vulnerability in the Oracle Sourcing component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, and 12.2.4 allows remote authenticated users to affect confidentiality via unknown vectors related to Bid/Quote creation.

Affected Software

5 affected components

Oracle E-Business Suite=12.1.1

Oracle E-Business Suite=12.1.2

Oracle E-Business Suite=12.1.3

Oracle E-Business Suite=12.2.3

Oracle E-Business Suite=12.2.4

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

Event History

Jul 16, 2015

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-4728?

The severity of CVE-2015-4728 is considered high due to its potential impact on confidentiality.

How do I fix CVE-2015-4728?

To fix CVE-2015-4728, apply the latest security patches provided by Oracle for affected versions of the Oracle E-Business Suite.

Who is affected by CVE-2015-4728?

CVE-2015-4728 affects remote authenticated users of Oracle E-Business Suite versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, and 12.2.4.

What components are impacted by CVE-2015-4728?

The Oracle Sourcing component of the Oracle E-Business Suite is impacted by CVE-2015-4728.

What type of access is required to exploit CVE-2015-4728?

Exploitation of CVE-2015-4728 requires remote authenticated user access.