CVE-2014-2470: High severity Oracle Fusion Middleware vulnerability

Published Apr 16, 2014

Updated

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Security.

Affected Software

4 affected components

Oracle Fusion Middleware=10.0.2

Oracle Fusion Middleware=10.3.6

Oracle Fusion Middleware=12.1.1

Oracle Fusion Middleware=12.1.2.0.0

Event History

Apr 16, 2014

CVE Published

via MITRE·02:05 AM

Data Sourced

via MITRE·02:05 AM

Description

Data Sourced

via NVD·02:55 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2014-2470?

CVE-2014-2470 is considered a high severity vulnerability due to its potential impact on confidentiality, integrity, and availability.

How do I fix CVE-2014-2470?

To fix CVE-2014-2470, it is recommended to apply the security patches provided by Oracle for the affected versions of Oracle Fusion Middleware.

What versions of Oracle Fusion Middleware are affected by CVE-2014-2470?

CVE-2014-2470 affects Oracle Fusion Middleware versions 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0.

What are the potential risks associated with CVE-2014-2470?

The potential risks include unauthorized access, data breaches, and compromised system functionality due to the vulnerability in WLS Security.

Is CVE-2014-2470 being actively exploited?

As of the latest reports, there have been indications that CVE-2014-2470 is an attractive target for exploitation by attackers.