CVE-2015-4799

Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 7.6.2, 11.1.1.6.1, and 11.1.1.8.0 allows remote attackers to affect integrity via unknown vectors related to Security.

CVSS v2.0 4.3 MEDIUM

4.3^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html
http://www.securitytracker.com/id/1033898
http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html
http://www.securitytracker.com/id/1033898

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:oracle:fusion_middleware:7.6.2:::::::*
	cpe:2.3:a:oracle:fusion_middleware:11.1.1.6.1:::::::*
	cpe:2.3:a:oracle:fusion_middleware:11.1.1.8.0:::::::*

History

21 Nov 2024, 02:31

Type	Values Removed	Values Added
References	~~() http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html -~~	() http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html -
References	~~() http://www.securitytracker.com/id/1033898 -~~	() http://www.securitytracker.com/id/1033898 -

Information

Published : 2015-10-21 21:59

Updated : 2024-11-21 02:31

NVD link : CVE-2015-4799

Mitre link : CVE-2015-4799

CVE.ORG link : CVE-2015-4799

JSON object : View

Products Affected

oracle

fusion_middleware

CWE

NVD-CWE-noinfo

{"id": "CVE-2015-4799", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2015-10-21T21:59:16.833", "references": [{"url": "http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html", "source": "secalert_us@oracle.com"}, {"url": "http://www.securitytracker.com/id/1033898", "source": "secalert_us@oracle.com"}, {"url": "http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securitytracker.com/id/1033898", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 7.6.2, 11.1.1.6.1, and 11.1.1.8.0 allows remote attackers to affect integrity via unknown vectors related to Security."}, {"lang": "es", "value": "Vulnerabilidad no especificada en el componente Oracle WebCenter Sites en Oracle Fusion Middleware 7.6.2, 11.1.1.6.1 y 11.1.1.8.0 permite a atacantes remotos afectar a la integridad a trav\u00e9s de vectores desconocidos relacionados con Security."}], "lastModified": "2024-11-21T02:31:46.370", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:oracle:fusion_middleware:7.6.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2A9B040F-4062-45C1-A659-B5E9242B54CD"}, {"criteria": "cpe:2.3:a:oracle:fusion_middleware:11.1.1.6.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6DF57046-4537-475E-B25E-2375492850DD"}, {"criteria": "cpe:2.3:a:oracle:fusion_middleware:11.1.1.8.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4227A17D-C070-406A-BEB7-6D43F3A0E98A"}], "operator": "OR"}]}], "sourceIdentifier": "secalert_us@oracle.com"}