Detections
Analytics
Oracle Access Manager Multiple Vulnerabilities (July 2015 CPU)
high Nessus Plugin ID 84811
Language:
Synopsis
The remote host has a Single Sign On (SSO) application installed that is affected by multiple vulnerabilities.Description
The version of Oracle Access Manager installed on the remote host is affected by multiple vulnerabilities :- An unspecified flaw exists in the Configuration Service subcomponent that allows a remote, authenticated attacker to impact confidentiality and integrity.
(CVE-2015-2593)
- An unspecified flaw exists in the Authentication Engine subcomponent that allows a remote attacker to cause a denial of service condition. (CVE-2015-4751)
Solution
Apply the appropriate patches according to the July 2015 Oracle Critical Patch Update advisory.See Also
Plugin Details
Severity: High
ID: 84811
File Name: oracle_access_manager_cpu_jul_2015.nasl
Version: 1.5
Type: local
Agent: windows, macosx, unix
Family: Misc.
Published: 7/16/2015
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 4.2
CVSS v2
Risk Factor: High
Base Score: 7.1
Temporal Score: 5.3
Vector: CVSS2#AV:A/AC:L/Au:S/C:C/I:C/A:N
Vulnerability Information
CPE: cpe:/a:oracle:fusion_middleware
Required KB Items: Oracle/OAM/Installed
Exploit Ease: No known exploits are available
Patch Publication Date: 7/14/2015
Vulnerability Publication Date: 7/14/2015
Reference Information
CVE: CVE-2015-2593, CVE-2015-4751