CVE-2014-2404: Medium severity Oracle Fusion Middleware vulnerability

Published Apr 16, 2014

Updated

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 10.1.4.3, 11.1.1.3.0, 11.1.1.5.0, 11.1.1.7.0, 11.1.2.0.0, 11.1.2.1.0, and 11.1.2.2.0 allows remote authenticated users to affect confidentiality via unknown vectors related to WebGate.

Affected Software

7 affected components

Oracle Fusion Middleware=10.1.4.3

Oracle Fusion Middleware=11.1.1.3.0

Oracle Fusion Middleware=11.1.1.5.0

Oracle Fusion Middleware=11.1.1.7.0

Oracle Fusion Middleware=11.1.2.0

Oracle Fusion Middleware=11.1.2.1.0

Oracle Fusion Middleware=11.1.2.2.0

Event History

Apr 16, 2014

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Data Sourced

via NVD·01:55 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2014-2404?

CVE-2014-2404 is rated as a medium severity vulnerability that affects confidentiality.

How do I fix CVE-2014-2404?

To mitigate CVE-2014-2404, it is recommended to apply the latest patches from Oracle for the affected versions.

Who is affected by CVE-2014-2404?

CVE-2014-2404 affects remote authenticated users of Oracle Fusion Middleware versions 10.1.4.3 and 11.1.1.3.0 through 11.1.2.2.0.

What type of vulnerability is CVE-2014-2404?

CVE-2014-2404 is an unspecified vulnerability within the Oracle Access Manager component.

Can CVE-2014-2404 be exploited remotely?

Yes, CVE-2014-2404 can be exploited by remote authenticated users.