CVE-2014-4289

Published: Oct 15, 2014Modified: May 6, 2026

3.6

Vector

AV:N/AC:H/Au:S/C:P/I:P/A:N

Exploitability: 3.9 / Impact: 4.9

Source: NVD

Description

Unspecified vulnerability in the JDBC component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2014-6544.

Affected (4)

Products: Oracle: Database Server

Oracle

1 product

Database Server

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Oracle Database Server	Version 11.1.0.7
Oracle Database Server	Version 11.2.0.3
Oracle Database Server	Version 11.2.0.4
Oracle Database Server	Version 12.1.0.1

References (4)

http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html

Source: secalert_us@oracle.com

PatchVendor Advisory

http://www.securityfocus.com/bid/70541

Source: secalert_us@oracle.com

http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.securityfocus.com/bid/70541

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.