CVE-2014-4297: Medium severity Oracle Database Server vulnerability

Published Oct 15, 2014

Updated

Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4290, CVE-2014-4291, CVE-2014-4292, CVE-2014-4293, CVE-2014-4296, CVE-2014-4310, CVE-2014-6547, and CVE-2014-6477.

Affected Software

5 affected components

Oracle Database Server=11.1.0.7

Oracle Database Server=11.2.0.3

Oracle Database Server=11.2.0.4

Oracle Database Server=12.1.0.1

Oracle Database Server=12.1.0.2

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html

Event History

Oct 15, 2014

CVE Published

via MITRE·03:15 PM

Data Sourced

via MITRE·03:15 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-4297?

The severity of CVE-2014-4297 is not explicitly defined, but it is considered to potentially affect confidentiality for remote authenticated users.

How do I fix CVE-2014-4297?

To fix CVE-2014-4297, it is recommended to apply the latest Oracle Database patches provided by Oracle.

Which versions of Oracle Database are affected by CVE-2014-4297?

CVE-2014-4297 affects Oracle Database Server versions 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2.

What impact does CVE-2014-4297 have on users?

CVE-2014-4297 allows remote authenticated users to access confidential information, potentially leading to data breaches.

Is CVE-2014-4297 related to other vulnerabilities?

Yes, CVE-2014-4297 is a different vulnerability than CVE-2014-4290, CVE-2014-4291, CVE-2014-4292, and others.