Vulnerability-Lookup

CNVD-2015-05031

Vulnerability from cnvd - Published: 2015-07-30

Title

Oracle Fusion Oracle Endeca Information Discovery Studio组件存在未明漏洞

Description

Oracle Fusion Middleware是一个全面的中间件产品系列，由甲骨文公司业界领先的SOA和中间件产品组成。Oracle Endeca Information Discovery 是一个企业数据挖掘平台,用于对各种数据进行高级、直观的探索和分析。 Oracle Fusion Middleware Oracle Endeca Information Discovery Studio组件存在安全漏洞，远程攻击者可利用该漏洞影响系统完整性，保密性和可用性。

Severity

高

Patch Name

Oracle Fusion Oracle Endeca Information Discovery Studio组件存在未明漏洞的补丁

Patch Description

Oracle Fusion Middleware是一个全面的中间件产品系列，由甲骨文公司业界领先的SOA和中间件产品组成。Oracle Endeca Information Discovery 是一个企业数据挖掘平台,用于对各种数据进行高级、直观的探索和分析。Oracle Fusion Middleware Oracle Endeca Information Discovery Studio组件存在安全漏洞，远程攻击者可利用该漏洞影响系统完整性，保密性和可用性。目前，厂商已经发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

Reference

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

Impacted products

Name
['Oracle Oracle Endeca Information Discovery Studio 2.2.2', 'Oracle Oracle Endeca Information Discovery Studio 2.3', 'Oracle Oracle Endeca Information Discovery Studio 2.4', 'Oracle Oracle Endeca Information Discovery Studio 3.0', 'Oracle Oracle Endeca Information Discovery Studio 3.1']

Show details on source website

JSON

To clipboard Create KEV Entry

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2014-4745"
    }
  },
  "description": "Oracle Fusion Middleware\u662f\u4e00\u4e2a\u5168\u9762\u7684\u4e2d\u95f4\u4ef6\u4ea7\u54c1\u7cfb\u5217\uff0c\u7531\u7532\u9aa8\u6587\u516c\u53f8\u4e1a\u754c\u9886\u5148\u7684SOA\u548c\u4e2d\u95f4\u4ef6\u4ea7\u54c1\u7ec4\u6210\u3002Oracle Endeca Information Discovery \u662f\u4e00\u4e2a\u4f01\u4e1a\u6570\u636e\u6316\u6398\u5e73\u53f0,\u7528\u4e8e\u5bf9\u5404\u79cd\u6570\u636e\u8fdb\u884c\u9ad8\u7ea7\u3001\u76f4\u89c2\u7684\u63a2\u7d22\u548c\u5206\u6790\u3002\r\n\r\nOracle Fusion Middleware Oracle Endeca Information Discovery Studio\u7ec4\u4ef6\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5f71\u54cd\u7cfb\u7edf\u5b8c\u6574\u6027\uff0c\u4fdd\u5bc6\u6027\u548c\u53ef\u7528\u6027\u3002",
  "discovererName": "Oracle",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u7ecf\u53d1\u5e03\u4e86\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u8fd9\u4e2a\u5b89\u5168\u95ee\u9898\uff0c\u8bf7\u5230\u5382\u5546\u7684\u4e3b\u9875\u4e0b\u8f7d\uff1a\r\nhttp://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2015-05031",
  "openTime": "2015-07-30",
  "patchDescription": "Oracle Fusion Middleware\u662f\u4e00\u4e2a\u5168\u9762\u7684\u4e2d\u95f4\u4ef6\u4ea7\u54c1\u7cfb\u5217\uff0c\u7531\u7532\u9aa8\u6587\u516c\u53f8\u4e1a\u754c\u9886\u5148\u7684SOA\u548c\u4e2d\u95f4\u4ef6\u4ea7\u54c1\u7ec4\u6210\u3002Oracle Endeca Information Discovery \u662f\u4e00\u4e2a\u4f01\u4e1a\u6570\u636e\u6316\u6398\u5e73\u53f0,\u7528\u4e8e\u5bf9\u5404\u79cd\u6570\u636e\u8fdb\u884c\u9ad8\u7ea7\u3001\u76f4\u89c2\u7684\u63a2\u7d22\u548c\u5206\u6790\u3002Oracle Fusion Middleware Oracle Endeca Information Discovery Studio\u7ec4\u4ef6\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5f71\u54cd\u7cfb\u7edf\u5b8c\u6574\u6027\uff0c\u4fdd\u5bc6\u6027\u548c\u53ef\u7528\u6027\u3002\u76ee\u524d\uff0c\u5382\u5546\u5df2\u7ecf\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Oracle Fusion Oracle Endeca Information Discovery Studio\u7ec4\u4ef6\u5b58\u5728\u672a\u660e\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Oracle  Oracle Endeca Information Discovery Studio 2.2.2",
      "Oracle  Oracle Endeca Information Discovery Studio  2.3",
      "Oracle  Oracle Endeca Information Discovery Studio  2.4",
      "Oracle  Oracle Endeca Information Discovery Studio  3.0",
      "Oracle  Oracle Endeca Information Discovery Studio  3.1"
    ]
  },
  "referenceLink": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html",
  "serverity": "\u9ad8",
  "submitTime": "2015-07-28",
  "title": "Oracle Fusion Oracle Endeca Information Discovery Studio\u7ec4\u4ef6\u5b58\u5728\u672a\u660e\u6f0f\u6d1e"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2015-05031

Tags

Sightings

Nomenclature