CVE-2015-4744: Low severity oracle fusion middleware vulnerability

Published Jul 16, 2015

Updated

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2; and the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, 12.1.2.0, and 12.1.3.0 allows remote attackers to affect integrity via unknown vectors related to Java Server Faces.

Affected Software

7 affected components

Oracle Fusion Middleware=2.1.1

Oracle Fusion Middleware=3.0.1

Oracle Fusion Middleware=3.1.2

Oracle Fusion Middleware=10.3.6

Oracle Fusion Middleware=12.1.1

Oracle Fusion Middleware=12.1.2.0.0

Oracle Fusion Middleware=12.1.3.0.0

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

Event History

Jul 16, 2015

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-4744?

CVE-2015-4744 is rated as a critical vulnerability that affects the integrity of the Oracle GlassFish Server and Oracle WebLogic Server components.

How do I fix CVE-2015-4744?

To fix CVE-2015-4744, apply the latest patches and updates provided by Oracle for the affected Fusion Middleware versions.

What components are affected by CVE-2015-4744?

CVE-2015-4744 affects multiple versions of Oracle GlassFish Server and Oracle WebLogic Server within Oracle Fusion Middleware.

Can CVE-2015-4744 be exploited remotely?

Yes, CVE-2015-4744 can be exploited remotely, allowing attackers to potentially compromise the integrity of the system.

Is there a workaround for CVE-2015-4744?

There are no official workarounds for CVE-2015-4744, so applying the necessary updates is essential for protection.