CVE-2014-4234
First published: Thu Jul 17 2014(Updated: )
Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3, 6.3.1, 6.3.2, 6.3.3, and 6.3.4 allows remote attackers to affect confidentiality via unknown vectors related to Data, Domain & Function Security.
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Supply Chain Products Suite | =6.1.0 | |
| Oracle Supply Chain Products Suite | =6.2.0 | |
| Oracle Supply Chain Products Suite | =6.3.0 | |
| Oracle Supply Chain Products Suite | =6.3.1 | |
| Oracle Supply Chain Products Suite | =6.3.2 | |
| Oracle Supply Chain Products Suite | =6.3.3 | |
| Oracle Supply Chain Products Suite | =6.3.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://seclists.org/fulldisclosure/2014/Dec/23
- http://secunia.com/advisories/59322
- http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
- http://www.securityfocus.com/archive/1/534161/100/0/threaded
- http://www.securityfocus.com/bid/68643
- http://www.securitytracker.com/id/1030582
- http://www.vmware.com/security/advisories/VMSA-2014-0012.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94575
Frequently Asked Questions
What is the severity of CVE-2014-4234?
CVE-2014-4234 has a moderate severity level as it allows remote attackers to affect confidentiality.
How do I fix CVE-2014-4234?
To fix CVE-2014-4234, apply the latest patches or updates provided by Oracle for the affected versions of Supply Chain Products Suite.
What versions of Oracle Supply Chain Products Suite are affected by CVE-2014-4234?
CVE-2014-4234 affects Oracle Supply Chain Products Suite versions 6.1, 6.2, 6.3, 6.3.1, 6.3.2, 6.3.3, and 6.3.4.
What type of attacks does CVE-2014-4234 allow?
CVE-2014-4234 potentially allows remote attackers to compromise the confidentiality of data through unspecified vectors.
Is CVE-2014-4234 related to any specific security components?
CVE-2014-4234 is related to the Oracle Transportation Management component within the Oracle Supply Chain Products Suite.
- collector/nvd-index
- agent/severity
- agent/references
- agent/author
- agent/description
- agent/type
- agent/tags
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- vendor/oracle
- canonical/oracle supply chain products suite
- version/oracle supply chain products suite/6.1.0
- version/oracle supply chain products suite/6.2.0
- version/oracle supply chain products suite/6.3.0
- version/oracle supply chain products suite/6.3.1
- version/oracle supply chain products suite/6.3.2
- version/oracle supply chain products suite/6.3.3
- version/oracle supply chain products suite/6.3.4