Oracle WebCenter Portal Unspecified Remote Information Disclosure (July 2014 CPU)

medium Nessus Plugin ID 77636

Synopsis

The remote host is affected by an unspecified remote information disclosure vulnerability.

Description

The remote host has a version of Oracle WebCenter Portal that is affected by a remote security vulnerability that could allow an attacker the ability to gain access to sensitive information.

Solution

Apply Oracle's July 2014 CPU update.

See Also

http://www.nessus.org/u?77697fb1

Plugin Details

Severity: Medium

ID: 77636

File Name: oracle_webcenter_portal_cve_2014_4211.nbin

Version: 1.205

Type: local

Agent: windows, macosx, unix

Family: Misc.

Published: 9/11/2014

Updated: 11/22/2024

Configuration: Enable thorough checks

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.4

CVSS v2

Risk Factor: High

Base Score: 7.1

Temporal Score: 5.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:N/A:N

CVSS Score Source: CVE-2014-4257

CVSS v3

Risk Factor: Medium

Base Score: 6.5

Temporal Score: 5.7

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:oracle:fusion_middleware

Required KB Items: installed_sw/Oracle WebCenter Portal

Exploit Ease: No known exploits are available

Patch Publication Date: 7/15/2014

Vulnerability Publication Date: 7/15/2014

Reference Information

CVE: CVE-2014-4211, CVE-2014-4257

BID: 68563, 68609