CVE-2015-4847 — Oracle Supply Chain Products Suite vulnerability

3 documents3 sources

Severity

4.3MEDIUMNVD

EPSS

0.3%

top 45.64%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Oracle Supply Chain Products Suite

Timeline

PublishedOct 21

Latest updateMay 17

Description

Unspecified vulnerability in the Oracle Configurator component in Oracle Supply Chain Products Suite 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via vectors related to OCI.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

▶NVDoracle/supply_chain_products_suite4 versions+3

🔴Vulnerability Details

GHSA

GHSA-gcvq-55jx-5484: Unspecified vulnerability in the Oracle Configurator component in Oracle Supply Chain Products Suite 12↗2022-05-17

▶

CVEList

CVE-2015-4847: Unspecified vulnerability in the Oracle Configurator component in Oracle Supply Chain Products Suite 12↗2015-10-21

▶