CVE-2014-4257
7.1 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:C/I:N/A:N
5.8 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
74.0%
Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.8.0 allows remote attackers to affect confidentiality via unknown vectors related to Portlet Services.
Affected configurations
References
seclists.org/fulldisclosure/2014/Dec/23
secunia.com/advisories/58739
www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
www.securityfocus.com/archive/1/534161/100/0/threaded
www.securityfocus.com/bid/68563
www.vmware.com/security/advisories/VMSA-2014-0012.html
exchange.xforce.ibmcloud.com/vulnerabilities/94541
Related
7.1 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:C/I:N/A:N
5.8 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
74.0%