What is the CVSS score of CVE-2015-4839?

CVE-2015-4839 has a CVSS 2.0 base score of 10.0 (Critical). CVSS vector: AV:N/AC:L/Au:N/C:C/I:C/A:C. EPSS exploitation probability: 2.6%.

Is there a patch available for CVE-2015-4839?

Yes, a patch is available for CVE-2015-4839. Update the affected software to the latest version immediately.

E Business Suite CVE-2015-4839

CRITICAL

2015-10-21 secalert_us@oracle.com

Information Disclosure Oracle E Business Suite

10.0

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

10.0 CRITICAL

AV:N/AC:L/Au:N/C:C/I:C/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:L/Au:N/C:C/I:C/A:C

Attack Vector

Network

Attack Complexity

Low

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

Oct 21, 2015 - 23:59 cve.org

CRITICAL 10.0

DescriptionCVE.org

Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to DB Listener, a different vulnerability than CVE-2015-4798.

AnalysisAI

Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality, integrity, and availability via. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity.

Technical ContextAI

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in E Business Suite

View all

CVE-2022-21587 CRITICAL Act Now POC

9.8 Oct 18

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload).

CVE-2013-0397 MEDIUM This Month POC

6.4 Jan 17

Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, a

CVE-2022-21500 HIGH This Week POC

7.5 May 20

Vulnerability in Oracle E-Business Suite (component: Manage Proxies). Rated high severity (CVSS 7.5), this vulnerability

CVE-2015-4798 CRITICAL Act Now

10.0 Oct 21

Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2 all

CVE-2019-10219 MEDIUM This Month POC

6.1 Nov 08

A vulnerability was found in Hibernate-Validator. Rated medium severity (CVSS 6.1), this vulnerability is remotely explo

CVE-2025-30727 CRITICAL Act Now

9.8 Apr 15

Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: iSurvey Module). Rated critical sev

CVE-2019-2489 CRITICAL Act Now

9.1 Jan 16

Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: OCM Query). Rated

CVE-2019-2453 CRITICAL Act Now

9.1 Jan 16

Vulnerability in the Oracle Performance Management component of Oracle E-Business Suite (subcomponent: Performance Manag

CVE-2018-2656 CRITICAL Act Now

9.1 Jan 18

Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite (subcomponent: Data Manager Server). Rat

CVE-2019-2551 HIGH This Week

8.2 Apr 23

Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server). Ra

CVE-2019-2498 HIGH This Week

8.2 Jan 16

Vulnerability in the Oracle Partner Management component of Oracle E-Business Suite (subcomponent: Partner Dash board).

CVE-2019-2497 HIGH This Week

8.2 Jan 16

Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Messages). Rate

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2023-7028 CRITICAL POC