PT-2014-7242 · Oracle · Database Server

Publicado 2014-11-23 · Atualizado 2017-09-08 · CVE-2014-6477

NVD

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:L/Au:S/C:C/I:N/A:N

Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4290, CVE-2014-4291, CVE-2014-4292, CVE-2014-4293, CVE-2014-4296, CVE-2014-4297, CVE-2014-4310, and CVE-2014-6547. NOTE: this issue was originally mapped to CVE-2014-4301, but CVE-2014-4301 is for an unrelated vulnerability.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2014-6477

Produtos afetados

Database Server

Referências · 4

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6477 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-6477 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/99937 · Nota
• http://oracle.com/technetwork/topics/security/cpuoct2014-1972960.html · Aviso do Fabricante