CVE-2014-6541: Medium severity oracle database vulnerability

Published Jan 21, 2015

Updated

Unspecified vulnerability in the Recovery component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2, when running on Windows, allows remote authenticated users to affect confidentiality via vectors related to DBMSIR.

Affected Software

5 affected components

Oracle Database Server=11.1.0.7

Oracle Database Server=11.2.0.3

Oracle Database Server=11.2.0.4

Oracle Database Server=12.1.0.1

Oracle Database Server=12.1.0.2

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html

Event History

Jan 21, 2015

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-6541?

CVE-2014-6541 is considered a high severity vulnerability due to its potential impact on data confidentiality.

How do I fix CVE-2014-6541?

To remediate CVE-2014-6541, apply the latest patches released by Oracle for the affected database server versions.

What systems are affected by CVE-2014-6541?

CVE-2014-6541 affects Oracle Database Server versions 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 running on Windows.

What is the nature of the vulnerability in CVE-2014-6541?

CVE-2014-6541 is an unspecified vulnerability in the Recovery component that allows remote authenticated users to affect confidentiality.

Who is affected by CVE-2014-6541?

Any organization using the specified Oracle Database Server versions on Windows could be affected by CVE-2014-6541 if not properly patched.