CVE-2014-0398: Medium severity Oracle E-Business Suite vulnerability

Published Jan 15, 2014

Updated

Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, and 12.2.2 allows remote attackers to affect confidentiality via unknown vectors related to Discoverer.

Affected Software

4 affected components

Oracle E-Business Suite=11.5.10.2

Oracle E-Business Suite=12.0.6

Oracle E-Business Suite=12.1.3

Oracle E-Business Suite=12.2.2

Event History

Jan 15, 2014

CVE Published

via MITRE·01:33 AM

Data Sourced

via MITRE·01:33 AM

Description

Data Sourced

via NVD·04:08 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2014-0398?

CVE-2014-0398 is classified as a vulnerability that could allow remote attackers to affect confidentiality.

How do I fix CVE-2014-0398?

To mitigate CVE-2014-0398, Oracle recommends applying the latest security patches for the affected versions of Oracle E-Business Suite.

Which versions of Oracle E-Business Suite are affected by CVE-2014-0398?

CVE-2014-0398 affects Oracle E-Business Suite versions 11.5.10.2, 12.0.6, 12.1.3, and 12.2.2.

What is the potential impact of CVE-2014-0398?

The potential impact of CVE-2014-0398 includes unauthorized access to sensitive data, affecting the confidentiality of the system.

Are there any workarounds for CVE-2014-0398?

Currently, the primary recommendation for CVE-2014-0398 is to apply the official security patches provided by Oracle.