VIR Vulnerability Intelligence Relay

CVE-2015-4744

low
Published 2015-07-16 · Modified 2026-05-06
CVSS v3
—
CVSS v2
2.6
VIR risk
2.6

Description

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2; and the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, 12.1.2.0, and 12.1.3.0 allows remote attackers to affect integrity via unknown vectors related to Java Server Faces.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: secalert_us@oracle.com — http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

Application impact
VendorProductVersionsFixed
oracle oraclefusion_middleware2.1.1
oracle oraclefusion_middleware3.0.1
oracle oraclefusion_middleware3.1.2
oracle oraclefusion_middleware10.3.6
oracle oraclefusion_middleware12.1.1
oracle oraclefusion_middleware12.1.2.0.0
oracle oraclefusion_middleware12.1.3.0.0

References

Verify integrity in audit chain (admin only). AS-IS.