CVE-2015-4740: Medium severity oracle database vulnerability

Published Jul 16, 2015

Updated

Unspecified vulnerability in the RDBMS Partitioning component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.

Affected Software

5 affected components

Oracle Database Server=11.1.0.7

Oracle Database Server=11.2.0.3

Oracle Database Server=11.2.0.4

Oracle Database Server=12.1.0.1

Oracle Database Server=12.1.0.2

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

Event History

Jul 16, 2015

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-4740?

CVE-2015-4740 is considered a high severity vulnerability due to its potential impact on confidentiality, integrity, and availability.

How do I fix CVE-2015-4740?

To fix CVE-2015-4740, apply the latest patches provided by Oracle for the affected versions of Oracle Database Server.

Who is affected by CVE-2015-4740?

Remote authenticated users of Oracle Database Server versions 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 are affected by CVE-2015-4740.

What types of attacks can CVE-2015-4740 facilitate?

CVE-2015-4740 can facilitate attacks that compromise the confidentiality, integrity, and availability of the database.

Is a workaround available for CVE-2015-4740?

There is no specific workaround for CVE-2015-4740; the recommended action is to apply the necessary security patches.