CVE-2015-4851 in E-Business Suite

सारांश

द्वारा MITRE

Unspecified vulnerability in the Oracle iSupplier Portal component in Oracle E-Business Suite 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to XML input.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• आरक्षित करना: 24/06/2015
• प्रकटीकरण: 21/10/2015
• संयम: स्वीकृत
• प्रविष्टि: VDB-78590
• CPE: तैयार
• CWE: CWE-404 (पुष्टि की गई)
• CVSS: 6.8 (NVD)
• EPSS: 0.03088
• KEV: नहीं
• गतिविधियाँ: बहुत कम
• क्षेत्र: Pharma, Hospital, ...

स्रोत

• MITRE: https://www.cve.org/CVERecord?id=CVE-2015-4851
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-4851
• CVE Details: https://www.cvedetails.com/cve/CVE-2015-4851/