CVE-2015-0475

Published Apr 16, 2015

Last updated 8 years ago

Overview

Description: Unspecified vulnerability in the JD Edwards EnterpriseOne Technology component in Oracle JD Edwards Products 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Web Runtime Security.
Source: secalert_us@oracle.com
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 4
Impact score: 2.9
Exploitability score: 8
Vector string: AV:N/AC:L/Au:S/C:P/I:N/A:N

Weaknesses

nvd@nist.gov: NVD-CWE-noinfo

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:oracle:jd_edwards_products:9.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "49EB63E0-F74D-4C36-B10A-E995FD7AAA0D"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References