CVE-2014-6487: Low severity oracle fusion middleware vulnerability

Published Oct 15, 2014

Updated

Unspecified vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote authenticated users to affect integrity via unknown vectors related to End User Self Service.

Affected Software

4 affected components

Oracle Fusion Middleware=11.1.1.5.0

Oracle Fusion Middleware=11.1.1.7.0

Oracle Fusion Middleware=11.1.2.1.0

Oracle Fusion Middleware=11.1.2.2.0

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html

Event History

Oct 15, 2014

CVE Published

via MITRE·10:03 PM

Data Sourced

via MITRE·10:03 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-6487?

CVE-2014-6487 is considered to have a moderate severity level due to potential integrity impacts affecting remote authenticated users.

How do I fix CVE-2014-6487?

To address CVE-2014-6487, it is recommended to apply the latest security patches provided by Oracle for affected versions of Oracle Fusion Middleware.

Which versions of Oracle Fusion Middleware are affected by CVE-2014-6487?

CVE-2014-6487 impacts Oracle Fusion Middleware versions 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2.

What types of users are impacted by CVE-2014-6487?

CVE-2014-6487 can affect remote authenticated users who are utilizing the End User Self Service features in Oracle Identity Manager.

Are there known exploit techniques for CVE-2014-6487?

As of now, detailed exploit techniques for CVE-2014-6487 are not publicly documented, suggesting the need for cautious mitigation strategies.