Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4290, CVE-2014-4291, CVE-2014-4292, CVE-2014-4293, CVE-2014-4296, CVE-2014-4297, CVE-2014-4310, and CVE-2014-6547. NOTE: this issue was originally mapped to CVE-2014-4301, but CVE-2014-4301 is for an unrelated vulnerability.
References
Link | Resource |
---|---|
http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html | Patch Vendor Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/99937 |
Configurations
Configuration 1 (hide)
|
Information
Published : 2014-11-23 11:59
Updated : 2017-09-07 18:29
NVD link : CVE-2014-6477
Mitre link : CVE-2014-6477
JSON object : View
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
Products Affected
oracle
- database_server