Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA10639
HistoryJul 17, 2015 - 12:00 a.m.

KLA10639 Multiple vulnerabilities in Oracle products

2015-07-1700:00:00
Kaspersky Lab
threats.kaspersky.com
28

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.003 Low

EPSS

Percentile

70.4%

JSON

Detect date:

07/17/2015

Severity:

Critical

Description:

Unspecified vulnerabilities were found in Oracle Supply Chain Products Suite, Oracle Database Server, Oracle Commerce Platform and Oracle Enterprise Manager. By exploiting this vulnerability malicious users can affect confidentiality, integrity and availability. This vulnerabilities can be exploited via vectors related to Oracle Agile PLM Framework, Business Process Automation, Content Acquisition System, Content Management, RAC Management, Content Acquisition System, Security, Diagnostics and unknown vectors.

Affected products:

Oracle Supply Chain Products Suite versions 6.1, 6.2, 6.3.0 through 6.3.7, 9.3.3 and 9.3.4
Oracle Database Server versions prior to 4.2.3.00.08, 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, 12.1.0.2
Oracle Commerce Platform versions 3.0.2, 3.1.1, 3.1.2, 11.0, and 11.1
Oracle Enterprise Manager Grid Control EM Base Platform version 11.1.0.1
Oracle Enterprise Manager Grid Control EM Plugin for DB versions 12.1.0.5, 12.1.0.6, 12.1.0.7
Oracle Enterprise Manager Grid Control EM DB Control versions 11.1.0.7, 11.2.0.3 and 11.2.0.4

Solution:

Update to the latest version
Get latest versions

Original advisories:

Oracle bulletin

Impacts:

OSI

Related products:

Oracle Database

CVE-IDS:

CVE-2015-2663
CVE-2015-2660
CVE-2015-2599
CVE-2015-2585
CVE-2015-2607
CVE-2015-4735
CVE-2015-2644
CVE-2015-2646
CVE-2015-2655
CVE-2015-2657
CVE-2015-2647
CVE-2015-2653
CVE-2015-2629
CVE-2015-4768
CVE-2015-4740
CVE-2015-2595
CVE-2015-2586
CVE-2015-4755

References

Related

nessus 2
suse 1
prion 19
cve 19
srcincite 2
zdt 1
openvas 6
packetstorm 1
securityvulns 2
oracle 1
nessus
nessus
Oracle Database Multiple Vulnerabilities (July 2015 CPU)
2015-07-17 00:00:00
Oracle Enterprise Manager Cloud Control Multiple Vulnerabilities (July 2015 CPU)
2015-07-20 00:00:00
suse
suse
Security update for oracle-update (important)
2015-08-06 14:33:02
prion
prion
Design/Logic Flaw
2015-07-16 11:00:00
Design/Logic Flaw
2015-07-16 11:00:00
Design/Logic Flaw
2015-07-16 11:00:00
cve
cve
CVE-2015-4740
2015-07-16 11:00:00
CVE-2015-4755
2015-07-16 11:00:00
CVE-2015-4768
2015-07-16 11:00:00
srcincite
srcincite
SRC-2015-0003 : Oracle Endeca Tools and Frameworks AMF Request Beanshell Script Remote Code Execution Vulnerability
2015-02-01 00:00:00
SRC-2015-0002 : Oracle Endeca Tools and Frameworks Session Generation Authentication Bypass Vulnerability
2015-02-01 00:00:00
zdt
zdt
Oracle Application Express Cross Site Scripting Vulnerability
2015-07-18 00:00:00
openvas
openvas
Oracle Database Server Unspecified Vulnerability -05 Jan16
2016-01-25 00:00:00
Oracle Database Server Unspecified Vulnerability -06 Jan16
2016-01-25 00:00:00
Oracle Database Server Unspecified Vulnerability -04 Jan16
2016-01-25 00:00:00
packetstorm
packetstorm
Oracle Application Express Cross Site Scripting
2015-07-17 00:00:00
securityvulns
securityvulns
SEC Consult SA-20150716-0 :: Permanent Cross-Site Scripting in Oracle Application Express
2015-07-27 00:00:00
Oracle / Sun / PeopleSoft / MySQL multiple security vulnerabilities
2015-07-20 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - July 2015
2015-07-14 00:00:00

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.003 Low

EPSS

Percentile

70.4%

JSON
Related for KLA10639
nessus2suse1prion19cve19srcincite2zdt1openvas6packetstorm1securityvulns2oracle1