PT-2015-2479

CVE-2015-4900

·

Published

2015-10-21

·

Updated

2016-12-24

Description by

CVSS 2.0
6.5
Medium
MetricsAV:N/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 11.2.0.4, 12.1.0.1, and 12.1.0.2
Description The issue is related to errors in the code of the XDB - XML Database component in Oracle Database. It may allow a remote attacker to access the XDB - XML Database or execute arbitrary code, potentially affecting confidentiality, integrity, and availability.
Recommendations For Oracle Database Server version 11.2.0.4, update to a version that includes the fix for this issue. For Oracle Database Server version 12.1.0.1, update to a version that includes the fix for this issue. For Oracle Database Server version 12.1.0.2, update to a version that includes the fix for this issue.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
CWE-17
Related identifiers
CVE-2015-4900
BDU:2015-11844
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com