ID CVE-2014-0377
Summary Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality via vectors related to SYS tables.
References
Vulnerable Configurations
  • cpe:2.3:a:oracle:database_server:11.1.0.7:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:database_server:11.1.0.7:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:database_server:11.2.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:database_server:11.2.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:database_server:11.2.0.4:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:database_server:11.2.0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:database_server:12.1.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:database_server:12.1.0.1:*:*:*:*:*:*:*
CVSS
Base: 4.0 (as of 06-03-2014 - 04:50)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW SINGLE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:N/AC:L/Au:S/C:P/I:N/A:N
refmap via4
bid
  • 64758
  • 64824
confirm http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html
osvdb 102081
sectrack 1029607
secunia 56452
suse SUSE-SU-2014:0130
Last major update 06-03-2014 - 04:50
Published 15-01-2014 - 16:08
Back to Top