Description
Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4290, CVE-2014-4291, CVE-2014-4292, CVE-2014-4293, CVE-2014-4296, CVE-2014-4297, CVE-2014-4310, and CVE-2014-6547. NOTE: this issue was originally mapped to CVE-2014-4301, but CVE-2014-4301 is for an unrelated vulnerability.
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/99937
Patch, Vendor Advisory x_refsource_confirm
http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
Scores
EPSS
0.0115
EPSS Percentile
63.1%
Details
CWE
CWE-200
Status
published
Products (5)
oracle/database_server
11.1.0.7
oracle/database_server
11.2.0.3
oracle/database_server
11.2.0.4
oracle/database_server
12.1.0.1
oracle/database_server
12.1.0.2
Published
Nov 23, 2014
Tracked Since
Feb 18, 2026