Oracle October 2014 Critical Patch Update Multiple Vulnerabilities
BID:70406
Info
Oracle October 2014 Critical Patch Update Multiple Vulnerabilities
| Bugtraq ID: | 70406 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | Yes |
| Published: | Oct 13 2014 12:00AM |
| Updated: | Oct 13 2014 12:00AM |
| Credit: | Oracle |
| Vulnerable: |
Sun Solaris 11 Oracle Weblogic Server 10.0.2 Oracle VM VirtualBox 4.1 Oracle VM VirtualBox 4.0 Oracle VM VirtualBox 3.2 Oracle VM VirtualBox 3.1 Oracle Retail Markdown Optimization 13.1 Oracle Primavera P6 Enterprise Project Portfolio Management 8.2 Oracle Primavera P6 Enterprise Project Portfolio Management 8.1 Oracle Primavera P6 Enterprise Project Portfolio Management 7.0 Oracle PeopleSoft Enterprise PeopleTools 8.52 Oracle JDeveloper 10.1.3.5.0 Oracle Identity Manager 11.1.1.5 Oracle Enterprise Manager Ops Center 11.1 Oracle Application Express 3.2.1 .00.10 Oracle Application Express 2.2.1 Oracle Application Express 4.1 Oracle Application Express 4.0 Oracle Application Express 3.2.0.00.27 Oracle Application Express 3.2 Oracle Application Express 2.2 Oracle Application Express 2.1 Oracle Application Express 2.0 Oracle Application Express 1.5 |
| Not Vulnerable: | |
Discussion
Oracle October 2014 Critical Patch Update Multiple Vulnerabilities
Oracle has released advance notification regarding the October 2014 Critical Patch Update (CPU) to be released on October 14, 2014. The update addresses 155 vulnerabilities affecting the following software:
Oracle Database 11g Release 1
Oracle Database 11g Release 2
Oracle Database 12c Release 1
Oracle Application Express
Oracle Fusion Middleware 11g Release 1
Oracle Fusion Middleware 11g Release 2
Oracle Fusion Middleware 12c
Oracle Access Manager
Oracle Endeca Information Discovery Studio
Oracle Enterprise Data Quality
Oracle Identity Manager
Oracle JDeveloper
Oracle OpenSSO
Oracle WebLogic Server
Application Performance Management
Enterprise Manager for Oracle Database Releases 10g, 11g, 12c
Enterprise Manager Ops Center
Oracle E-Business Suite
Oracle E-Business Suite
Oracle Agile PLM
Oracle Transportation Management
Oracle PeopleSoft Enterprise HRMS
Oracle PeopleSoft Enterprise PeopleTools
Oracle JD Edwards EnterpriseOne Tools
Oracle Communications MetaSolv Solution
Oracle Communications Session Border Controller
Oracle Retail Allocation
Oracle Retail Clearance Optimization Engine
Oracle Retail Invoice Matching
Oracle Retail Markdown Optimization
Oracle Health Sciences Empirica Inspections
Oracle Health Sciences Empirica Signal
Oracle Health Sciences Empirica Study
Oracle Primavera Contract Management
Oracle Primavera P6 Enterprise Project Portfolio Management
Oracle JavaFX
Oracle Java SE
Oracle Java SE Embedded
Oracle JRockit
Oracle Fujitsu server
Oracle Solaris
Oracle Secure Global Desktop
Oracle VM VirtualBox
Oracle MySQL Server
Exploiting the most severe of these vulnerabilities may potentially compromise the database server or the host operating system.
Oracle has released advance notification regarding the October 2014 Critical Patch Update (CPU) to be released on October 14, 2014. The update addresses 155 vulnerabilities affecting the following software:
Oracle Database 11g Release 1
Oracle Database 11g Release 2
Oracle Database 12c Release 1
Oracle Application Express
Oracle Fusion Middleware 11g Release 1
Oracle Fusion Middleware 11g Release 2
Oracle Fusion Middleware 12c
Oracle Access Manager
Oracle Endeca Information Discovery Studio
Oracle Enterprise Data Quality
Oracle Identity Manager
Oracle JDeveloper
Oracle OpenSSO
Oracle WebLogic Server
Application Performance Management
Enterprise Manager for Oracle Database Releases 10g, 11g, 12c
Enterprise Manager Ops Center
Oracle E-Business Suite
Oracle E-Business Suite
Oracle Agile PLM
Oracle Transportation Management
Oracle PeopleSoft Enterprise HRMS
Oracle PeopleSoft Enterprise PeopleTools
Oracle JD Edwards EnterpriseOne Tools
Oracle Communications MetaSolv Solution
Oracle Communications Session Border Controller
Oracle Retail Allocation
Oracle Retail Clearance Optimization Engine
Oracle Retail Invoice Matching
Oracle Retail Markdown Optimization
Oracle Health Sciences Empirica Inspections
Oracle Health Sciences Empirica Signal
Oracle Health Sciences Empirica Study
Oracle Primavera Contract Management
Oracle Primavera P6 Enterprise Project Portfolio Management
Oracle JavaFX
Oracle Java SE
Oracle Java SE Embedded
Oracle JRockit
Oracle Fujitsu server
Oracle Solaris
Oracle Secure Global Desktop
Oracle VM VirtualBox
Oracle MySQL Server
Exploiting the most severe of these vulnerabilities may potentially compromise the database server or the host operating system.
Exploit / POC
Oracle October 2014 Critical Patch Update Multiple Vulnerabilities
Some of these issues may not require specific exploit code and may be trivial to exploit.
Some of these issues may not require specific exploit code and may be trivial to exploit.
References
Oracle October 2014 Critical Patch Update Multiple Vulnerabilities
References:
References:
- Oracle Homepage (Oracle)