VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 21, 2015· Updated Jun 17, 2026

CVE-2015-0393

CVE-2015-0393

Description

Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to DB Privileges. NOTE: the previous information is from the January 2015 CPU. Oracle has not commented on the researcher's claim that the PUBLIC role is granted the INDEX privilege for the DUAL table during a "seeded install," which allows remote authenticated users to gain SYSDBA privileges and execute arbitrary code.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • Oracle Corporation/E Business Suite7 versions
    cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:e-business_suite:12.0.6:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:e-business_suite:12.1.3:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:e-business_suite:12.2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:e-business_suite:12.2.3:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:e-business_suite:12.2.4:*:*:*:*:*:*:*
    • (no CPE)range: 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, 12.2.3, 12.2.4

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.