CVE-2014-6548 Other in n/a
Local attackers can compromise confidentiality, integrity, and availability of Oracle SOA Suite via the B2B Engine.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2014-6548?
CVE-2014-6548 is a medium-severity vulnerability in Oracle Fusion Middleware, published on 21 Jan 2015. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Unspecified vulnerability in the Oracle SOA Suite component in Oracle Fusion Middleware 11.1.1.7 allows local users to affect confidentiality, integrity, and availability via vectors related to B2B Engine.
Which versions are affected by CVE-2014-6548?
It affects 1 product.
Products include Oracle Fusion Middleware.
How do I fix CVE-2014-6548?
No fix has been published for CVE-2014-6548 yet. Limit exposure of the affected software until one is available.
Is CVE-2014-6548 being exploited?
There is no known exploitation of CVE-2014-6548 in the wild and no public exploit code.
Other vulnerabilities in Oracle Fusion Middleware
Sources
Also known as GHSA-r94g-53jc-6294.