CVE-2015-4768: Medium severity oracle supply chain products suite vulnerability

Published Jul 16, 2015

Updated

Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, 6.3.6, and 6.3.7 allows remote authenticated users to affect confidentiality via unknown vectors related to Diagnostics.

Affected Software

10 affected components

Oracle Supply Chain Products Suite=6.1.0

Oracle Supply Chain Products Suite=6.2.0

Oracle Supply Chain Products Suite=6.3.0

Oracle Supply Chain Products Suite=6.3.1

Oracle Supply Chain Products Suite=6.3.2

Oracle Supply Chain Products Suite=6.3.3

Oracle Supply Chain Products Suite=6.3.4

Oracle Supply Chain Products Suite=6.3.5

Oracle Supply Chain Products Suite=6.3.6

Oracle Supply Chain Products Suite=6.3.7

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

Event History

Jul 16, 2015

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-4768?

The severity of CVE-2015-4768 is not explicitly rated, but it allows remote authenticated users to affect confidentiality.

How do I fix CVE-2015-4768?

To address CVE-2015-4768, update Oracle Supply Chain Products Suite to a version that contains the relevant security patch.

Who is affected by CVE-2015-4768?

CVE-2015-4768 affects users of Oracle Supply Chain Products Suite versions 6.1.0 through 6.3.7.

What kind of impact does CVE-2015-4768 have?

CVE-2015-4768 impacts confidentiality and could potentially expose sensitive information to authenticated remote users.

Is CVE-2015-4768 a known vulnerability?

Yes, CVE-2015-4768 is a known vulnerability reported in Oracle Supply Chain Products Suite.