CVE-2015-0386: Medium severity oracle fusion middleware vulnerability

Published Jan 21, 2015

Updated

Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 11.1.1.7.0, 12.1.2.0, and 12.1.3.0 allows remote attackers to affect availability via unknown vectors related to Web Listener, a different vulnerability than CVE-2013-0338, CVE-2013-2877, and CVE-2014-0191.

Affected Software

3 affected components

Oracle Fusion Middleware=11.1.1.7.0

Oracle Fusion Middleware=12.1.2.0.0

Oracle Fusion Middleware=12.1.3.0.0

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html

Event History

Jan 21, 2015

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-0386?

The severity of CVE-2015-0386 is classified as critical due to its potential impact on the availability of Oracle HTTP Server.

What versions of Oracle Fusion Middleware are affected by CVE-2015-0386?

CVE-2015-0386 affects Oracle Fusion Middleware versions 11.1.1.7.0, 12.1.2.0.0, and 12.1.3.0.0.

How can I mitigate CVE-2015-0386?

Mitigation for CVE-2015-0386 involves applying the latest security patches provided by Oracle for the affected versions.

Are there any known exploits for CVE-2015-0386?

As of now, specific exploits for CVE-2015-0386 have not been publicly disclosed.

What type of attacks can CVE-2015-0386 enable?

CVE-2015-0386 may allow remote attackers to disrupt service availability through unspecified vectors in the Oracle HTTP Server.