CVE-2015-4845: Medium severity oracle e-business suite vulnerability
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality via vectors related to Java APIs - AOL/J. NOTE: the previous information is from the October 2015 CPU. Oracle has not commented on third-party claims that this issue allows remote attackers to enumerate database users via a series of requests to Aoljtest.js.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-4845?
CVE-2015-4845 has been classified as a vulnerability that can affect confidentiality within certain versions of Oracle E-Business Suite.
How do I fix CVE-2015-4845?
To mitigate CVE-2015-4845, it is recommended to apply the latest security patches provided by Oracle for the affected versions of E-Business Suite.
Which versions of Oracle E-Business Suite are affected by CVE-2015-4845?
CVE-2015-4845 affects Oracle E-Business Suite versions 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4.
What type of vulnerability is CVE-2015-4845?
CVE-2015-4845 is an unspecified vulnerability related to Java APIs in the Oracle Application Object Library component.
Can CVE-2015-4845 be exploited by remote attackers?
Yes, CVE-2015-4845 allows remote attackers to potentially compromise confidentiality through exploitation techniques.