CVE-2015-2653 : Unspecified vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component in Oracle

Unspecified vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component in Oracle Commerce Platform 3.1.1, 3.1.2, 11.0, and 11.1 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Content Acquisition System.

Published 2015-07-16 11:00:13

Updated 2015-07-17 22:09:13

Source Oracle

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2015-2653

EPSS FAQ

0.22%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 60 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2015-2653

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
6.4	MEDIUM	AV:N/AC:L/Au:N/C:P/I:P/A:N	10.0	4.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: None

Products affected by CVE-2015-2653

Oracle » Commerce Platform » Version: 11.0
cpe:2.3:a:oracle:commerce_platform:11.0:*:*:*:*:*:*:*
Matching versions
Oracle » Commerce Platform » Version: 11.1
cpe:2.3:a:oracle:commerce_platform:11.1:*:*:*:*:*:*:*
Matching versions
Oracle » Commerce Platform » Version: 3.1.1
cpe:2.3:a:oracle:commerce_platform:3.1.1:*:*:*:*:*:*:*
Matching versions
Oracle » Commerce Platform » Version: 3.1.2
cpe:2.3:a:oracle:commerce_platform:3.1.2:*:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2015-2653

Exploit prediction scoring system (EPSS) score for CVE-2015-2653

CVSS scores for CVE-2015-2653

References for CVE-2015-2653

Products affected by CVE-2015-2653