CVE-2014-6534: Medium severity oracle fusion middleware vulnerability

Published Oct 15, 2014

Updated

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, 12.1.2.0, and 12.1.3.0 allows remote authenticated users to affect integrity via vectors related to WLS Console.

Affected Software

5 affected components

Oracle Fusion Middleware=10.0.2

Oracle Fusion Middleware=10.3.6

Oracle Fusion Middleware=12.1.1

Oracle Fusion Middleware=12.1.2.0.0

Oracle Fusion Middleware=12.1.3.0.0

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html

Event History

Oct 15, 2014

CVE Published

via MITRE·10:03 PM

Data Sourced

via MITRE·10:03 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-6534?

CVE-2014-6534 is considered a medium severity vulnerability due to its potential impact on the integrity of Oracle WebLogic Server.

How do I fix CVE-2014-6534?

To fix CVE-2014-6534, it is recommended to apply the latest patches and updates provided by Oracle for the affected versions.

Who is affected by CVE-2014-6534?

CVE-2014-6534 affects remote authenticated users of Oracle WebLogic Server versions 10.0.2.0, 10.3.6.0, 12.1.1.0, 12.1.2.0, and 12.1.3.0.

What type of vulnerability is CVE-2014-6534?

CVE-2014-6534 is an unspecified vulnerability that allows remote authenticated users to affect the integrity of the WLS Console.

When was CVE-2014-6534 disclosed?

CVE-2014-6534 was disclosed in October 2014 as part of Oracle's Critical Patch Update.