CVE-2014-2480: Medium severity oracle fusion middleware vulnerability

Published Jul 17, 2014

Updated

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2014-2481.

Affected Software

4 affected components

Oracle Fusion Middleware=10.0.2

Oracle Fusion Middleware=10.3.6

Oracle Fusion Middleware=12.1.1

Oracle Fusion Middleware=12.1.2.0.0

Event History

Jul 17, 2014

CVE Published

via MITRE·02:36 AM

Data Sourced

via MITRE·02:36 AM

Description

Frequently Asked Questions

What is the severity of CVE-2014-2480?

CVE-2014-2480 is classified with a severity rating that indicates it could affect confidentiality, integrity, and availability.

How do I fix CVE-2014-2480?

To fix CVE-2014-2480, upgrade your Oracle WebLogic Server to the latest version as recommended by Oracle.

Which Oracle Fusion Middleware versions are affected by CVE-2014-2480?

CVE-2014-2480 affects Oracle Fusion Middleware versions 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0.

Can CVE-2014-2480 be exploited remotely?

Yes, CVE-2014-2480 can be exploited by remote attackers through unspecified vectors.

Is CVE-2014-2480 related to other vulnerabilities?

CVE-2014-2480 is a different vulnerability than CVE-2014-2481, though both affect Oracle WebLogic Server.