Vulnerability Details : CVE-2014-0400
Unspecified vulnerability in the Oracle Internet Directory component in Oracle Fusion Middleware 11.1.1.6 and 11.1.1.7 allows remote authenticated users to affect confidentiality via vectors related to OID LDAP server.
Exploit prediction scoring system (EPSS) score for CVE-2014-0400
Probability of exploitation activity in the next 30 days: 0.18%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 55 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2014-0400
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
6.3
|
MEDIUM | AV:N/AC:M/Au:S/C:C/I:N/A:N |
6.8
|
6.9
|
NIST |
References for CVE-2014-0400
-
http://www.securitytracker.com/id/1029618
Oracle Internet Directory LDAP Bug Lets Remote Authenticated Users Access Data - SecurityTracker
-
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html
Oracle Critical Patch Update - January 2014Vendor Advisory
-
http://www.securityfocus.com/bid/64758
RETIRED: Oracle January 2014 Critical Patch Update Multiple Vulnerabilities
-
http://www.securityfocus.com/bid/64822
Oracle Internet Directory CVE-2014-0400 Remote Security Vulnerability
Products affected by CVE-2014-0400
- cpe:2.3:a:oracle:fusion_middleware:11.1.1.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:fusion_middleware:11.1.1.7.0:*:*:*:*:*:*:*