CVE-2014-6546

2014-10-1522:55:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2014-6546

oracle

database server

vulnerability

jpublisher

nvd

security

confidentiality

integrity

availability

5.7 Medium

AI Score

Confidence

Low

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.004 Low

EPSS

Percentile

72.0%

JSON

Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.

CPENameOperatorVersion
oracle:database_serveroracle database servereq12.1.0.2
oracle:database_serveroracle database servereq11.2.0.4
oracle:database_serveroracle database servereq11.2.0.3
oracle:database_serveroracle database servereq12.1.0.1
oracle:database_serveroracle database servereq11.1.0.7

CPE	Name	Operator	Version
oracle:database_server	oracle database server	eq	12.1.0.2
oracle:database_server	oracle database server	eq	11.2.0.4
oracle:database_server	oracle database server	eq	11.2.0.3
oracle:database_server	oracle database server	eq	12.1.0.1
oracle:database_server	oracle database server	eq	11.1.0.7