CVE-2014-2493: Medium severity oracle fusion middleware vulnerability

Published Jul 17, 2014

Updated

Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.2.4.0, and 12.1.2.0.0 allows remote attackers to affect confidentiality and availability via vectors related to ADF Faces.

Affected Software

3 affected components

Oracle Fusion Middleware=11.1.1.7.0

Oracle Fusion Middleware=11.1.2.4.0

Oracle Fusion Middleware=12.1.2.0.0

Event History

Jul 17, 2014

CVE Published

via MITRE·02:36 AM

Data Sourced

via MITRE·02:36 AM

Description

Frequently Asked Questions

What is the severity of CVE-2014-2493?

CVE-2014-2493 is classified as a moderate severity vulnerability affecting Oracle Fusion Middleware.

How do I fix CVE-2014-2493?

To fix CVE-2014-2493, apply the latest security patches provided by Oracle for the affected versions of Fusion Middleware.

Which versions of Oracle Fusion Middleware are affected by CVE-2014-2493?

CVE-2014-2493 affects Oracle Fusion Middleware versions 11.1.1.7.0, 11.1.2.4.0, and 12.1.2.0.0.

What impact does CVE-2014-2493 have on systems?

CVE-2014-2493 can potentially lead to loss of confidentiality and availability on affected systems.

Are there any workarounds for CVE-2014-2493?

There are no official workarounds for CVE-2014-2493; applying patches is the recommended course of action.