CVE-2015-2598

{"id": "CVE-2015-2598", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 3.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 6.8, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2015-07-16T10:59:24.380", "references": [{"url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html", "tags": ["Patch", "Vendor Advisory"], "source": "secalert_us@oracle.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in the mobile app in Oracle Business Intelligence Enterprise Edition in Oracle Fusion Middleware before 11.1.1.7.0 (11.6.39) allows remote authenticated users to affect integrity via unknown vectors related to Mobile - iPad."}, {"lang": "es", "value": "Vulnerabilidad no especificada en la aplicaci\u00f3n m\u00f3vil en Oracle Business Intelligence Enterprise Edition en Oracle Fusion Middleware en la versi\u00f3n anterior a 11.1.1.7.0 (11.6.39), permite a usuarios remotos autenticados afectar la integridad a trav\u00e9s de vectores desconocidos relacionados con M\u00f3viles - iPad."}], "lastModified": "2015-07-16T17:15:48.113", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:oracle:fusion_middleware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6B1329CB-EABA-4654-8E93-0B11B05B8AF1", "versionEndIncluding": "11.1.1.6.39"}], "operator": "OR"}]}], "sourceIdentifier": "secalert_us@oracle.com"}