CVE-2015-4848: Medium severity oracle supply chain products suite vulnerability

Published Oct 21, 2015

Updated

Unspecified vulnerability in the Oracle Configurator component in Oracle Supply Chain Products Suite 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality via unknown vectors related to Integration with Peoplesoft.

Affected Software

4 affected components

Oracle Supply Chain Products Suite=12.0.6

Oracle Supply Chain Products Suite=12.1.3

Oracle Supply Chain Products Suite=12.2.3

Oracle Supply Chain Products Suite=12.2.4

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html

Event History

Oct 21, 2015

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-4848?

CVE-2015-4848 is rated as a medium-severity vulnerability that affects confidentiality.

How do I fix CVE-2015-4848?

To fix CVE-2015-4848, upgrade to the latest version of Oracle Supply Chain Products Suite that addresses the vulnerability.

Which Oracle Supply Chain Products Suite versions are affected by CVE-2015-4848?

CVE-2015-4848 affects Oracle Supply Chain Products Suite versions 12.0.6, 12.1.3, 12.2.3, and 12.2.4.

What types of attacks can exploit CVE-2015-4848?

CVE-2015-4848 can be exploited by remote attackers to affect the confidentiality of the system.

Is there a patch available for CVE-2015-4848?

Yes, Oracle has released a patch for CVE-2015-4848 that users should apply to their affected systems.