Vulnerability in Oracle Fusion_middleware
CVE-2014-4241
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0 and 10.3.6.0 allows remote attackers to affect integrity via vectors related to WLS - Web Services.
EPSS: 0.009 (76.3th percentile) — read the EPSS interpretation.
Affected products
- Oracle Fusion_middleware — versions 10.0.2, 10.3.6
- Vmware Esxi — versions 5.1
- Vmware Vcenter_server — versions 5.0, 5.1, 5.5
- Vmware Vcenter_server_appliance — versions 5.1
- N/a — versions n/a
Public proof-of-concept exploits
References
- secalert_us@oracle.com (x_refsource_CONFIRM, Third Party Advisory)
- 20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities (mailing-list, x_refsource_BUGTRAQ)
- oracle-cpujul2014-cve20144241(94559) (vdb-entry, x_refsource_XF)
- secalert_us@oracle.com (x_refsource_CONFIRM, Vendor Advisory)
- 20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities (mailing-list, x_refsource_FULLDISC, Third Party Advisory)
- 68649 (Third Party Advisory, vdb-entry, x_refsource_BID)
Frequently asked questions
- What is CVE-2014-4241?
- CVE-2014-4241 is a vulnerability in Oracle Fusion_middleware. Published 2014-07-17.
- Is CVE-2014-4241 known to be exploited?
- 12 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.