Unscored severity · published Oct 15, 2014
CVE-2014-2475
Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 4.63, 4.71, 5.0, and 5.1 allows remote attackers to affect availability via…
–
CVSS
1.8%
EPSS
No
On KEV
Description
Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 4.63, 4.71, 5.0, and 5.1 allows remote attackers to affect availability via vectors related to SGD Proxy Server (ttaauxserv).
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VI
Virtualization · Oracle
4.63; 4.71; 5.0; 5.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-2475
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-2475
Patch
http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
www.securitytracker.com
http://www.securitytracker.com/id/1031034
More from Virtualization
5.5
CVE-2021-20191
A flaw was found in ansible
5.3
CVE-2020-10775
An Open redirect vulnerability was found in ovirt-engine versions 4.4 and earlier, where it allows remote attackers to redirect users to arbitrary web sites and attempt phishing…
–
CVE-2015-2581
Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.1 and 5.2 allows remote attackers to affect confidentiality and availability via…
–
CVE-2014-0230
Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire…
–
CVE-2014-6459
Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.0 and 5.1 allows remote attackers to affect availability via vectors related to…