CVE-2014-4255: Medium severity Oracle Fusion Middleware vulnerability

Published Jul 17, 2014

Updated

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS - Security and Policy.

Affected Software

3 affected components

Oracle Fusion Middleware=10.3.6

Oracle Fusion Middleware=12.1.1

Oracle Fusion Middleware=12.1.2.0.0

Event History

Jul 17, 2014

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2014-4255?

CVE-2014-4255 is considered a critical vulnerability affecting Oracle WebLogic Server.

How do I fix CVE-2014-4255?

To fix CVE-2014-4255, update your Oracle Fusion Middleware to the latest available version recommended by Oracle.

Which software versions are affected by CVE-2014-4255?

CVE-2014-4255 affects Oracle Fusion Middleware versions 10.3.6.0, 12.1.1.0, and 12.1.2.0.

Can CVE-2014-4255 lead to data breaches?

Yes, CVE-2014-4255 can potentially compromise the confidentiality, integrity, and availability of data.

Who can exploit CVE-2014-4255?

CVE-2014-4255 can be exploited by remote attackers targeting vulnerable Oracle WebLogic Server installations.