CVE-2015-4865: Low severity oracle e-business suite vulnerability

Published Oct 21, 2015

Updated

Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.1.3, 12.2.3, and 12.2.4 allows remote authenticated users to affect confidentiality via vectors related to Business Objects - BC4J.

Affected Software

3 affected components

Oracle E-Business Suite=12.1.3

Oracle E-Business Suite=12.2.3

Oracle E-Business Suite=12.2.4

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html

Event History

Oct 21, 2015

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-4865?

CVE-2015-4865 has a CVSS score indicating a medium level of severity due to its potential impact on confidentiality.

How do I fix CVE-2015-4865?

To fix CVE-2015-4865, apply the latest security patches provided by Oracle for the affected versions of E-Business Suite.

What versions of Oracle E-Business Suite are affected by CVE-2015-4865?

CVE-2015-4865 affects Oracle E-Business Suite versions 12.1.3, 12.2.3, and 12.2.4.

Can CVE-2015-4865 be exploited remotely?

Yes, CVE-2015-4865 can be exploited by remote authenticated users to affect confidentiality.

What components are impacted by CVE-2015-4865?

CVE-2015-4865 specifically impacts the Oracle Applications Framework component related to Business Objects - BC4J.