Oracle E-Business (July 2014 CPU)

Medium Nessus Plugin ID 76596

Synopsis

The remote host has a web application installed that is affected by multiple vulnerabilities.

Description

The version of Oracle E-Business installed on the remote host is missing the July 2014 Critical Patch Update (CPU). It is, therefore, affected by vulnerabilities in the following components :

- Oracle Applications Technology Stack
- Oracle Concurrent Processing
- Oracle Applications Manager
- Oracle iStore
- Oracle Applications Object Library

Solution

Apply the appropriate patch according to the July 2014 Oracle Critical Patch Update advisory.

See Also

http://www.nessus.org/u?77697fb1

Plugin Details

Severity: Medium

ID: 76596

File Name: oracle_e-business_cpu_jul_2014.nasl

Version: 1.10

Type: local

Family: Misc.

Published: 2014/07/18

Updated: 2019/11/26

Dependencies: 70177

Risk Information

Risk Factor: Medium

CVSS Score Source: CVE-2014-0224

CVSS v2.0

Base Score: 5.8

Temporal Score: 4.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:N

Temporal Vector: CVSS2#E:F/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/a:oracle:e-business_suite

Required KB Items: Oracle/E-Business/Version, Oracle/E-Business/patches/installed

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2014/07/15

Vulnerability Publication Date: 2014/07/15

Exploitable With

Core Impact

Reference Information

CVE: CVE-2014-0224, CVE-2014-2482, CVE-2014-4213, CVE-2014-4235, CVE-2014-4248

BID: 67899, 68647, 68648, 68651, 68653

CERT: 978508