First published: Wed Apr 16 2014(Updated: )
Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 10.1.4.3, 11.1.1.3.0, 11.1.1.5.0, 11.1.1.7.0, 11.1.2.0.0, 11.1.2.1.0, and 11.1.2.2.0 allows remote authenticated users to affect confidentiality via unknown vectors related to WebGate.
Credit: secalert_us@oracle.com
Affected Software | Affected Version | How to fix |
---|---|---|
Oracle Fusion Middleware | =10.1.4.3 | |
Oracle Fusion Middleware | =11.1.1.3.0 | |
Oracle Fusion Middleware | =11.1.1.5.0 | |
Oracle Fusion Middleware | =11.1.1.7.0 | |
Oracle Fusion Middleware | =11.1.2.0 | |
Oracle Fusion Middleware | =11.1.2.1.0 | |
Oracle Fusion Middleware | =11.1.2.2.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2014-2404 is rated as a medium severity vulnerability that affects confidentiality.
To mitigate CVE-2014-2404, it is recommended to apply the latest patches from Oracle for the affected versions.
CVE-2014-2404 affects remote authenticated users of Oracle Fusion Middleware versions 10.1.4.3 and 11.1.1.3.0 through 11.1.2.2.0.
CVE-2014-2404 is an unspecified vulnerability within the Oracle Access Manager component.
Yes, CVE-2014-2404 can be exploited by remote authenticated users.