CVE-2015-4838: Medium severity oracle fusion middleware vulnerability

Published Oct 21, 2015

Updated

Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.4.0, 12.1.2.0.0, and 12.1.3.0.0 allows remote authenticated users to affect confidentiality via vectors related to ADF Faces.

Affected Software

3 affected components

Oracle Fusion Middleware=11.1.2.4.0

Oracle Fusion Middleware=12.1.2.0.0

Oracle Fusion Middleware=12.1.3.0.0

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html

Event History

Oct 21, 2015

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-4838?

CVE-2015-4838 is considered a high-severity vulnerability due to its potential impact on confidentiality for remote authenticated users.

How do I fix CVE-2015-4838?

To mitigate CVE-2015-4838, it is recommended to apply the latest security patches provided by Oracle for affected versions of Fusion Middleware.

Who is affected by CVE-2015-4838?

CVE-2015-4838 affects users of Oracle Fusion Middleware versions 11.1.2.4.0, 12.1.2.0.0, and 12.1.3.0.0.

What types of vulnerabilities does CVE-2015-4838 relate to?

CVE-2015-4838 is related to unauthorized access and confidentiality issues within the ADF Faces component of Oracle JDeveloper.

Can CVE-2015-4838 be exploited remotely?

Yes, CVE-2015-4838 can be exploited by remote authenticated users due to its unspecified nature.