Lucene search

OracleCVE-2015-0436

HistoryJan 21, 2015 - 7:59 p.m.

CVE-2015-0436

2015-01-2119:59:20

oracle

web.nvd.nist.gov

cve-2015-0436

oracle ilearning

vulnerability

confidentiality

remote attackers

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

AI Score

5.8

Confidence

Low

EPSS

0.003

Percentile

70.6%

JSON

Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 6.0 and 6.1 allows remote attackers to affect confidentiality via unknown vectors related to Login.

Affected configurations

Nvd

Node

oracleilearningMatch6.0

oracleilearningMatch6.1

VendorProductVersionCPE
oracleilearning6.0cpe:2.3:a:oracle:ilearning:6.0:*:*:*:*:*:*:*
oracleilearning6.1cpe:2.3:a:oracle:ilearning:6.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
oracle	ilearning	6.0	cpe:2.3:a:oracle:ilearning:6.0:::::::*
oracle	ilearning	6.1	cpe:2.3:a:oracle:ilearning:6.1:::::::*

References

www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html

www.securityfocus.com/bid/72249

www.securitytracker.com/id/1031589

exchange.xforce.ibmcloud.com/vulnerabilities/100136

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

AI Score

5.8

Confidence

Low

EPSS

0.003

Percentile

70.6%

JSON

Related for CVE-2015-0436