CVE

Id
82122  
CVE No.
CVE-2015-4845  
Status
Candidate  
Description
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality via vectors related to Java APIs - AOL/J. NOTE: the previous information is from the October 2015 CPU. Oracle has not commented on third-party claims that this issue allows remote attackers to enumerate database users via a series of requests to Aoljtest.js.  
Phase
Assigned (20150624)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
736731 82122 CVE-2015-4845 BUGTRAQ:20151027 [ERPSCAN-15-025] Oracle E-Business Suite Database user enumeration Vulnerability  View
736732 82122 CVE-2015-4845 URL:http://www.securityfocus.com/archive/1/archive/1/536770/100/0/threaded  View
736733 82122 CVE-2015-4845 FULLDISC:20151027 [ERPSCAN-15-025] Oracle E-Business Suite Database user enumeration Vulnerability  View
736734 82122 CVE-2015-4845 URL:http://seclists.org/fulldisclosure/2015/Oct/97  View
736735 82122 CVE-2015-4845 MISC:http://erpscan.com/advisories/erpscan-15-025-oracle-e-business-suite-database-user-enumeration-vulnerability/  View
736736 82122 CVE-2015-4845 MISC:http://packetstormsecurity.com/files/134098/Oracle-E-Business-Suite-12.2.4-Database-User-Enumeration.html  View
736737 82122 CVE-2015-4845 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html  View
736738 82122 CVE-2015-4845 BID:77249  View
736739 82122 CVE-2015-4845 URL:http://www.securityfocus.com/bid/77249  View
736740 82122 CVE-2015-4845 SECTRACK:1033877  View

Related JVN