CVE-2014-4310

Опубликовано: 15 окт. 2014

Источник: nvd

CVSS2: 4

EPSS Низкий

Описание

Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4290, CVE-2014-4291, CVE-2014-4292, CVE-2014-4293, CVE-2014-4296, CVE-2014-4297, CVE-2014-6547, and CVE-2014-6477.

Ссылки

http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/70505
http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/70505

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:oracle:database_server:11.1.0.7:*:*:*:*:*:*:*

cpe:2.3:a:oracle:database_server:11.2.0.3:*:*:*:*:*:*:*

cpe:2.3:a:oracle:database_server:11.2.0.4:*:*:*:*:*:*:*

cpe:2.3:a:oracle:database_server:12.1.0.1:*:*:*:*:*:*:*

cpe:2.3:a:oracle:database_server:12.1.0.2:*:*:*:*:*:*:*

EPSS

Процентиль: 38%

0.00169

Низкий

4 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-vf47-8q3w-wwww

github

больше 3 лет назад