Vulnerability Details CVE-2014-4232
Unspecified vulnerability in the Oracle Secure Global Desktop (SGD) component in Oracle Virtualization 4.63, 4.71, 5.0, and 5.1 allows remote attackers to affect integrity via unknown vectors related to Workspace Web Application, a different vulnerability than CVE-2014-2463.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 64.7%
CVSS Severity
CVSS v2 Score 4.3
References
- http://seclists.org/fulldisclosure/2014/Dec/23
- http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
- http://www.securityfocus.com/archive/1/534161/100/0/threaded
- http://www.securityfocus.com/bid/68606
- http://www.vmware.com/security/advisories/VMSA-2014-0012.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94614
- http://seclists.org/fulldisclosure/2014/Dec/23
- http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
- http://www.securityfocus.com/archive/1/534161/100/0/threaded
- http://www.securityfocus.com/bid/68606
- http://www.vmware.com/security/advisories/VMSA-2014-0012.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94614
Products affected by CVE-2014-4232
-
cpe:2.3:a:oracle:virtualization:4.63
-
cpe:2.3:a:oracle:virtualization:4.71
-
cpe:2.3:a:oracle:virtualization:5.0
-
cpe:2.3:a:oracle:virtualization:5.1
-
cpe:2.3:a:oracle:virtualization_secure_global_desktop:4.63
-
cpe:2.3:a:oracle:virtualization_secure_global_desktop:4.71
-
cpe:2.3:a:oracle:virtualization_secure_global_desktop:5.0
-
cpe:2.3:a:oracle:virtualization_secure_global_desktop:5.10