CVE-2014-4201: Medium severity Oracle Fusion Middleware vulnerability

Published Jul 17, 2014

Updated

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect availability via vectors related to WLS - Web Services.

Affected Software

3 affected components

Oracle Fusion Middleware=10.3.6

Oracle Fusion Middleware=12.1.1

Oracle Fusion Middleware=12.1.2.0.0

Event History

Jul 17, 2014

CVE Published

via MITRE·02:36 AM

Data Sourced

via MITRE·02:36 AM

Description

Frequently Asked Questions

What is the severity of CVE-2014-4201?

CVE-2014-4201 is classified as a vulnerability that allows remote attackers to affect the availability of Oracle WebLogic Server.

How do I fix CVE-2014-4201?

To fix CVE-2014-4201, it is recommended to apply the latest security patches provided by Oracle for affected versions.

Which versions of Oracle Fusion Middleware are affected by CVE-2014-4201?

CVE-2014-4201 affects Oracle Fusion Middleware versions 10.3.6, 12.1.1, and 12.1.2.0.

What type of attacks are possible with CVE-2014-4201?

CVE-2014-4201 can be exploited by remote attackers to cause denial of service through vectors related to web services.

Is there a workaround for CVE-2014-4201?

While the best solution is to apply patches, potential workarounds may include configuring stricter network access controls.