CVE-2014-6499: Medium severity oracle fusion middleware vulnerability

Published Oct 15, 2014

Updated

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, 12.1.2.0, and 12.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to WebLogic Tuxedo Connector.

Affected Software

5 affected components

Oracle Fusion Middleware=10.0.2

Oracle Fusion Middleware=10.3.6

Oracle Fusion Middleware=12.1.1

Oracle Fusion Middleware=12.1.2.0.0

Oracle Fusion Middleware=12.1.3.0.0

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html

Event History

Oct 15, 2014

CVE Published

via MITRE·10:03 PM

Data Sourced

via MITRE·10:03 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-6499?

CVE-2014-6499 has a high severity rating due to its potential impact on confidentiality, integrity, and availability.

How do I fix CVE-2014-6499?

To fix CVE-2014-6499, update your Oracle WebLogic Server to the latest version recommended by Oracle.

What versions of Oracle Fusion Middleware are affected by CVE-2014-6499?

CVE-2014-6499 affects Oracle Fusion Middleware versions 10.0.2, 10.3.6, 12.1.1, 12.1.2, and 12.1.3.

Can CVE-2014-6499 be exploited remotely?

Yes, CVE-2014-6499 can be exploited by remote attackers through unknown vectors.

What components of Oracle Fusion Middleware are involved in CVE-2014-6499?

CVE-2014-6499 specifically involves the WebLogic Tuxedo Connector component of Oracle Fusion Middleware.