CVE-2015-4845

2015-10-2123:59:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2015-4845

oracle

e-business suite

vulnerability

confidentiality

remote attackers

java apis

5.6 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.006 Low

EPSS

Percentile

79.3%

JSON

Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality via vectors related to Java APIs - AOL/J. NOTE: the previous information is from the October 2015 CPU. Oracle has not commented on third-party claims that this issue allows remote attackers to enumerate database users via a series of requests to Aoljtest.js.

CPENameOperatorVersion
oracle:e-business_suiteoracle e-business suiteeq12.0.6
oracle:e-business_suiteoracle e-business suiteeq12.2.3
oracle:e-business_suiteoracle e-business suiteeq11.5.10.2
oracle:e-business_suiteoracle e-business suiteeq12.1.3
oracle:e-business_suiteoracle e-business suiteeq12.2.4

CPE	Name	Operator	Version
oracle:e-business_suite	oracle e-business suite	eq	12.0.6
oracle:e-business_suite	oracle e-business suite	eq	12.2.3
oracle:e-business_suite	oracle e-business suite	eq	11.5.10.2
oracle:e-business_suite	oracle e-business suite	eq	12.1.3
oracle:e-business_suite	oracle e-business suite	eq	12.2.4