CVE-2015-4746: Medium severity oracle supply chain products suite vulnerability

Published Jul 16, 2015

Updated

Unspecified vulnerability in the Oracle Agile Product Lifecycle Management for Process component in Oracle Supply Chain Products Suite 6.0.0.7, 6.1.0.3, 6.1.1.5, and 6.2.0.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Global Spec Management.

Affected Software

4 affected components

Oracle Supply Chain Products Suite=6.0.0.7

Oracle Supply Chain Products Suite=6.1.0.3

Oracle Supply Chain Products Suite=6.1.1.5

Oracle Supply Chain Products Suite=6.2.0.0

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

Event History

Jul 16, 2015

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-4746?

CVE-2015-4746 is classified as a vulnerability that allows remote authenticated users to affect confidentiality.

How do I fix CVE-2015-4746?

To resolve CVE-2015-4746, you should apply the relevant patches provided by Oracle for the affected versions of the Supply Chain Products Suite.

What versions are affected by CVE-2015-4746?

CVE-2015-4746 affects Oracle Supply Chain Products Suite versions 6.0.0.7, 6.1.0.3, 6.1.1.5, and 6.2.0.0.

What type of users are impacted by CVE-2015-4746?

CVE-2015-4746 impacts remote authenticated users of the affected Oracle Agile Product Lifecycle Management for Process component.

Are there any known exploits for CVE-2015-4746?

As of now, specific exploit techniques for CVE-2015-4746 have not been publicly disclosed.