Synced 30 Sept 2026 20:54 UTC Account
← All products

CVE-2015-2610

MEDIUM severity · CVSS 4.3
4.3CVSS MEDIUM

Summary

Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via unknown vectors related to Popup windows.

Impact & exploitability

Attack vectorNetwork
Attack complexity—
Privileges required—
User interaction—
Confidentiality impactNone
Integrity impact—
Availability impactNone
Exploit probability (EPSS)2%

AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected products we track (1)

Recommendation

Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.

Official patch: http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html ↗