A vulnerability was found in Oracle E-Business Suite 12.0.6/12.1.3/12.2.3/12.2.4. It has been classified as critical. Affected is an unknown function of the component Application Object Library. The manipulation leads to basic cross site scripting.
This vulnerability is traded as CVE-2015-4854. It is possible to launch the attack remotely. There is no exploit available.
It is recommended to upgrade the affected component.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2015-4854 | Oracle E-Business Suite 12.0.6/12.1.3/12.2.3/12.2.4 Application Object Library cross site scriting (BID-77253 / ID 86479)
A vulnerability was found in Oracle E-Business Suite 12.0.6/12.1.3/12.2.3/12.2.4. It has been classified as critical. Affected is an unknown function of the…
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
Compliance, SLA & Vendor Adherence
Advisory-Prüfung · Score-Einordnung · Fristen
Advisory Radar
Offizielles Hersteller-Update verfügbar
Hersteller-Sicherheitsmeldungen & Patch-Status
Handlungsempfehlung für Administratoren
Hersteller hat ein verifiziertes Patch-Release herausgegeben. Sofortiges Rollout auf Test- und Produktivsystemen empfohlen.
Referenzen aus der Primärquelle („Verifiziert" nur bei Hersteller-Domäne):
-
Web Referencewww.securitytracker.com
-
Web Referenceerpscan.io
-
Oracle Critical Patch Update (CPU) Verifiziertoracle.com
-
Web Referencewww.securityfocus.com
-
Web Referencewww.securityfocus.com
1 öffentliche Exploit-Referenz(en) detektiert (Full Disclosure / Bugtraq Mailing List).
PoC einsehen