CVE-2014-6578: Medium severity oracle database vulnerability

Published Jan 21, 2015

Updated

Unspecified vulnerability in the Workspace Manager component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SDOTOPO and WMSYS.LT.

Affected Software

4 affected components

Oracle Database Server=11.1.0.7

Oracle Database Server=11.2.0.3

Oracle Database Server=11.2.0.4

Oracle Database Server=12.1.0.1

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html

Event History

Jan 21, 2015

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-6578?

CVE-2014-6578 has a high severity rating as it can lead to impacts on confidentiality, integrity, and availability for affected systems.

What versions of Oracle Database Server are affected by CVE-2014-6578?

CVE-2014-6578 affects Oracle Database Server versions 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1.

How do I fix CVE-2014-6578?

To fix CVE-2014-6578, users should apply the latest security patches provided by Oracle for the affected database versions.

What is the impact of exploiting CVE-2014-6578?

Exploiting CVE-2014-6578 could allow remote authenticated users to compromise the confidentiality, integrity, and availability of the database.

Is CVE-2014-6578 a remote vulnerability?

Yes, CVE-2014-6578 is a remote vulnerability that can be exploited by authenticated users from a remote location.