Vulnerability Details CVE-2014-4245
Unspecified vulnerability in the RDBMS Core component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality via unknown vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 71.9%
CVSS Severity
CVSS v2 Score 3.5
References
- http://seclists.org/fulldisclosure/2014/Dec/23
- http://secunia.com/advisories/56910
- http://secunia.com/advisories/62196
- http://www-01.ibm.com/support/docview.wss?uid=swg21689484
- http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
- http://www.securityfocus.com/archive/1/534161/100/0/threaded
- http://www.securityfocus.com/bid/68617
- http://www.securitytracker.com/id/1030576
- http://www.vmware.com/security/advisories/VMSA-2014-0012.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94540
- http://seclists.org/fulldisclosure/2014/Dec/23
- http://secunia.com/advisories/56910
- http://secunia.com/advisories/62196
- http://www-01.ibm.com/support/docview.wss?uid=swg21689484
- http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
- http://www.securityfocus.com/archive/1/534161/100/0/threaded
- http://www.securityfocus.com/bid/68617
- http://www.securitytracker.com/id/1030576
- http://www.vmware.com/security/advisories/VMSA-2014-0012.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94540
Products affected by CVE-2014-4245
-
cpe:2.3:a:oracle:database_server:11.1.0.7
-
cpe:2.3:a:oracle:database_server:11.2.0.3
-
cpe:2.3:a:oracle:database_server:11.2.0.4
-
cpe:2.3:a:oracle:database_server:12.1.0.1