CVE-2014-4289: Low severity Oracle Database Server vulnerability
Published Oct 15, 2014
·Updated
Unspecified vulnerability in the JDBC component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2014-6544.
Affected Software
4 affected components
Oracle Database Server=11.1.0.7
Oracle Database Server=11.2.0.3
Oracle Database Server=11.2.0.4
Oracle Database Server=12.1.0.1
Remediation
Event History
Oct 15, 2014
CVE Published
via MITRE·03:15 PM
Data Sourced
via MITRE·03:15 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-4289?
CVE-2014-4289 is considered a medium severity vulnerability affecting the Oracle Database Server.
2
How do I mitigate CVE-2014-4289?
Mitigation for CVE-2014-4289 involves updating to the latest patch provided by Oracle for your affected database version.
3
What systems are affected by CVE-2014-4289?
CVE-2014-4289 affects Oracle Database Server versions 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1.
4
Can CVE-2014-4289 be exploited remotely?
Yes, CVE-2014-4289 can be exploited by remote authenticated users.
5
What impact does CVE-2014-4289 have on databases?
CVE-2014-4289 can potentially compromise the confidentiality and integrity of the affected Oracle databases.