CVE-2014-2417

The CVE-2014-2417 entry corresponds to a remote code execution vulnerability in Oracle Data Quality and Profiling for Data Integrator. The exposed component is the TSS12.DscXB.XB ActiveX control, where an untrusted pointer dereference can be exploited by enticing a user to open a malicious web pa...

CVE-2014-2418

CVE-2014-2418 affects Oracle Data Quality and Profiling for Data Integrator (Oracle Fusion Middleware 11.1.1.3.0). The root cause is an untrusted pointer dereference in the TSS12.DscTools.FileChooserDlg ActiveX control, enabling remote code execution when a user opens a malicious page. This CVE i...

CVE-2014-2418

Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality, a different vulnerability than CVE-2014-2407, CVE-2014-2415,...

CVE-2014-2416

CVE-2014-2416 affects Oracle Data Profiling and Data Quality for Data Integrator (Oracle Fusion Middleware 11.1.1.3.0). The root cause is a dereferencing error in the TSS12.DscForms.DateTimeWrapper ActiveX control, leading to remote code execution when a user opens a crafted page. This is part of...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality, a different vulnerability than CVE-2014-2415, CVE-2014-2416,...

CVE-2014-2407

Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality, a different vulnerability than CVE-2014-2415, CVE-2014-2416,...

CVE-2014-2407

CVE-2014-2407 is part of Oracle Data Quality and Profiling/Data Integrator vulnerabilities affecting Oracle Fusion Middleware 11.1.1.3.0. The accompanying advisories (CVE-2014-2415/2416/2417/2418) describe remote code execution via dereferencing arbitrary pointers in multiple Data Quality/ActiveX...

CVE-2014-2415: Undefined Security Weakness

Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality, a different vulnerability than CVE-2014-2407, CVE-2014-2416,...

CVE-2014-2416: Undefined Security Weakness

Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality, a different vulnerability than CVE-2014-2407, CVE-2014-2415,...

CVE-2014-2418: Undefined Security Weakness

Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality, a different vulnerability than CVE-2014-2407, CVE-2014-2415,...

CVE-2014-2407: Undefined Security Weakness

Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality, a different vulnerability than CVE-2014-2415, CVE-2014-2416,...

CVE-2014-2417: Undefined Security Weakness

Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality, a different vulnerability than CVE-2014-2407, CVE-2014-2415,...