CVE-2014-4232 : Unspecified vulnerability in the Oracle Secure Global Desktop (SGD) component in Oracle Virtualization 4.63, 4.71, 5.0,

Unspecified vulnerability in the Oracle Secure Global Desktop (SGD) component in Oracle Virtualization 4.63, 4.71, 5.0, and 5.1 allows remote attackers to affect integrity via unknown vectors related to Workspace Web Application, a different vulnerability than CVE-2014-2463.

Published 2014-07-17 05:10:17

Updated 2018-10-09 19:48:18

Source Oracle

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2014-4232

Probability of exploitation activity in the next 30 days: 0.34%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 71 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2014-4232

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:P/A:N	8.6	2.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: None

References for CVE-2014-4232

http://www.vmware.com/security/advisories/VMSA-2014-0012.html

VMSA-2014-0012.1

CVEs referencing this url
http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html

Oracle Critical Patch Update - July 2014
Vendor Advisory

CVEs referencing this url
http://seclists.org/fulldisclosure/2014/Dec/23

Full Disclosure: NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities

CVEs referencing this url
http://www.securityfocus.com/bid/68606

Oracle Secure Global Desktop CVE-2014-4232 Remote Security Vulnerability
https://exchange.xforce.ibmcloud.com/vulnerabilities/94614

Oracle Secure Global Desktop (SGD) Workspace Web Application unspecified CVE-2014-4232 Vulnerability Report
http://www.securityfocus.com/archive/1/534161/100/0/threaded

SecurityFocus

CVEs referencing this url

Products affected by CVE-2014-4232

Oracle » Virtualization » Version: 4.63
cpe:2.3:a:oracle:virtualization:4.63:*:*:*:*:*:*:*
Matching versions
Oracle » Virtualization » Version: 5.0
cpe:2.3:a:oracle:virtualization:5.0:*:*:*:*:*:*:*
Matching versions
Oracle » Virtualization » Version: 4.71
cpe:2.3:a:oracle:virtualization:4.71:*:*:*:*:*:*:*
Matching versions
Oracle » Virtualization » Version: 5.1
cpe:2.3:a:oracle:virtualization:5.1:*:*:*:*:*:*:*
Matching versions
Oracle » Virtualization Secure Global Desktop » Version: 5.10
cpe:2.3:a:oracle:virtualization_secure_global_desktop:5.10:*:*:*:*:*:*:*
Matching versions
Oracle » Virtualization Secure Global Desktop » Version: 4.63
cpe:2.3:a:oracle:virtualization_secure_global_desktop:4.63:*:*:*:*:*:*:*
Matching versions
Oracle » Virtualization Secure Global Desktop » Version: 4.71
cpe:2.3:a:oracle:virtualization_secure_global_desktop:4.71:*:*:*:*:*:*:*
Matching versions
Oracle » Virtualization Secure Global Desktop » Version: 5.0
cpe:2.3:a:oracle:virtualization_secure_global_desktop:5.0:*:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2014-4232

Exploit prediction scoring system (EPSS) score for CVE-2014-4232

CVSS scores for CVE-2014-4232

References for CVE-2014-4232

Products affected by CVE-2014-4232