CVE-2015-4851 in E-Business Suite

Zusammenfassung

von MITRE

Unspecified vulnerability in the Oracle iSupplier Portal component in Oracle E-Business Suite 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to XML input.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservieren: 24.06.2015
• Veröffentlichung: 21.10.2015
• Moderieren: akzeptiert
• Eintrag: VDB-78590
• CPE: bereit
• CWE: CWE-404 (bestätigt)
• CVSS: 6.8 (NVD)
• EPSS: 0.03088
• KEV: nein
• Aktivitäten: very low
• Sektor: Government, Industry, ...

Quellen

• MITRE: https://www.cve.org/CVERecord?id=CVE-2015-4851
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-4851
• CVE Details: https://www.cvedetails.com/cve/CVE-2015-4851/