Unscored severity · published Jan 21, 2015
CVE-2014-6572
Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, 12.1.3, 12.2.2, 12.2.3, and…
–
CVSS
1.2%
EPSS
No
On KEV
Description
Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors related to List of Values.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 68% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ES
E-business Suite · Oracle
12.0.4; 12.0.5; 12.0.6; 12.1.1; 12.1.2; 12.1.3; +3 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-6572
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-6572
Patch
http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
www.securitytracker.com
http://www.securitytracker.com/id/1031579
More from E-business Suite
9.8
CVE-2026-46817
Oracle E-Business Suite Improper Privilege Management Vulnerability
9.8
CVE-2025-61882
Oracle E-Business Suite Unspecified Vulnerability
9.8
CVE-2022-21587
Oracle E-Business Suite Unspecified Vulnerability
7.5
CVE-2025-61884
Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability
9.8
CVE-2025-30727
Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: iSurvey Module)