CVE-2015-4745: High severity oracle fusion middleware vulnerability

Published Jul 16, 2015

Updated

Unspecified vulnerability in the Oracle Endeca Information Discovery Studio component in Oracle Fusion Middleware 2.2.2, 2.3, 2.4, 3.0, and 3.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Integrator, a different vulnerability than CVE-2015-2602, CVE-2015-2603, CVE-2015-2604, CVE-2015-2605, and CVE-2015-2606.

Affected Software

5 affected components

Oracle Fusion Middleware=2.2.2

Oracle Fusion Middleware=2.3

Oracle Fusion Middleware=2.4

Oracle Fusion Middleware=3.0

Oracle Fusion Middleware=3.1

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

Event History

Jul 16, 2015

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-4745?

CVE-2015-4745 is classified as a vulnerability that can affect the confidentiality, integrity, and availability of the system.

How do I fix CVE-2015-4745?

To mitigate CVE-2015-4745, it is recommended to apply the latest security patches provided by Oracle for affected versions of the Fusion Middleware.

Which versions are affected by CVE-2015-4745?

CVE-2015-4745 affects Oracle Fusion Middleware versions 2.2.2, 2.3, 2.4, 3.0, and 3.1.

What type of attacks can exploit CVE-2015-4745?

CVE-2015-4745 can be exploited by remote attackers through unspecified vectors.

Is there a workaround for CVE-2015-4745?

There are no specific workarounds for CVE-2015-4745; applying the security updates is the primary recommendation.