CVE-2014-0391: Medium severity Oracle Fusion Middleware vulnerability

Published Jan 15, 2014

Updated

Unspecified vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.0, and 11.1.2.1 allows remote attackers to affect confidentiality via unknown vectors related to End User Self Service.

Affected Software

4 affected components

Oracle Fusion Middleware=11.1.1.5.0

Oracle Fusion Middleware=11.1.1.7.0

Oracle Fusion Middleware=11.1.2.0

Oracle Fusion Middleware=11.1.2.1.0

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html

Event History

Jan 15, 2014

CVE Published

via MITRE·01:33 AM

Data Sourced

via MITRE·01:33 AM

Description

Data Sourced

via NVD·04:08 PM

RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2014-0391?

CVE-2014-0391 has a severity rating that suggests potential risks to confidentiality due to unspecified vectors.

How do I fix CVE-2014-0391?

To mitigate CVE-2014-0391, apply the latest security patches provided by Oracle for affected versions of Fusion Middleware.

Which versions of Oracle Fusion Middleware are affected by CVE-2014-0391?

CVE-2014-0391 affects Oracle Fusion Middleware versions 11.1.1.5, 11.1.1.7, 11.1.2.0, and 11.1.2.1.

What can be the impact of CVE-2014-0391 if exploited?

Exploitation of CVE-2014-0391 may lead to unauthorized access to sensitive information, compromising confidentiality.

Is there a workaround for CVE-2014-0391?

As of now, there are no publicly documented workarounds for CVE-2014-0391; applying official patches is recommended.