Published: 21/10/2015 Updated: 24/12/2016

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 890

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Unspecified vulnerability in the Portable Clusterware component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote malicious users to affect confidentiality, integrity, and availability via unknown vectors.

Vulnerable Product	Search on Vulmon	Subscribe to Product
oracle database server 12.1.0.1
oracle database server 12.1.0.2
oracle database server 11.2.0.4

Oracle points patching firehose at 154 vulnerabilities

The Register • Richard Chirgwin • 21 Oct 2015

Of course there's a Java fix, there always is

Sysadmins forced by circumstance or folly to support Java can get busy again, with 25 fixes for the product among the Scarlet Letter's regular patch notice. The good news is that Oracle says none of the vulnerabilities in its mammoth bug-splat had been exploited as of 19 October. The fixes to Java SE and Java SE Embedded cover vulnerabilities in the CORBA (Common Object Request Broker Architecture), Remote Method Invocation (Java RMI), Java FX, serialisation, 2D, Java API for XML Processing (JAX...

CVE-2015-4863

Vulnerability Summary

Recent Articles

References

Vulmon Search

About

Products

Connect