CVE-2014-4237
Unspecified vulnerability in the RDBMS Core component in Oracle Database Server 11.2.0.4 and 12.1...
Unspecified vulnerability in the RDBMS Core component in Oracle Database Server 11.2.0.4 and 12.1.0.1 allows remote authenticated users to affect confidentiality via unknown vectors.
Exploit likelihood
What each source reports
NVD Score used
Unspecified vulnerability in the RDBMS Core component in Oracle Database Server 11.2.0.4 and 12.1.0.1 allows remote authenticated users to affect confidentiality via unknown vectors.
- Record
CVE-2014-4237- CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the RDBMS Core component in Oracle Database Server 11.2.0.4 and 12.1.0.1 allows remote authenticated users to affect confidentiality via unknown vectors.
- Record
CVE-2014-4237- Updated
- 2026-11-02
EUVDEUVD-2014-4166 No score
Unspecified vulnerability in the RDBMS Core component in Oracle Database Server 11.2.0.4 and 12.1.0.1 allows remote authenticated users to affect confidentiality via unknown vectors.
- Record
EUVD-2014-4166- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-p6vh-m29c-65m2 No score
Unspecified vulnerability in the RDBMS Core component in Oracle Database Server 11.2.0.4 and 12.1...
Unspecified vulnerability in the RDBMS Core component in Oracle Database Server 11.2.0.4 and 12.1.0.1 allows remote authenticated users to affect confidentiality via unknown vectors.
- Record
GHSA-p6vh-m29c-65m2- Updated
- 2026-11-02
OSVSUSE-SU-2015:0498-1 No score
Security update for oracle-update
This critical patch update contains 5 security fixes for the Oracle Database Server. One of the vulnerabilities could have been exploited over the network without a valid username and password.
Security Issues:
* CVE-2013-3751
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3751>
* CVE-2013-3774
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3774>
* CVE-2014-4236
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4236>
* CVE-2014-4237
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4237>
* CVE-2014-4245
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4245>
- Record
SUSE-SU-2015:0498-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:0498-2 No score
Security update for oracle-update
This critical patch update contains 5 security fixes for the Oracle Database Server. One of the vulnerabilities could have been exploited over the network without a valid username and password.
Security Issues:
* CVE-2013-3751
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3751>
* CVE-2013-3774
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3774>
* CVE-2014-4236
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4236>
* CVE-2014-4237
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4237>
* CVE-2014-4245
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4245>
- Record
SUSE-SU-2015:0498-2- Updated
- 2026-11-02
OSVSUSE-SU-2015:0907-1 No score
Security update for oracle-update
This critical patch update contains 5 security fixes for the Oracle Database Server. One of the vulnerabilities could have been exploited over the network without a valid username and password.
Security Issues:
* CVE-2013-3751
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3751>
* CVE-2013-3774
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3774>
* CVE-2014-4236
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4236>
* CVE-2014-4237
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4237>
* CVE-2014-4245
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4245>
- Record
SUSE-SU-2015:0907-1- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-4237 is a medium vulnerability (CVSS 4.0) in Oracle Database Server, published July 17, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.53%, the 84th percentile. No source names a fixed version.
References
vmware.com/security/advisories/VMSA-2014-0012.html
securityfocus.com/archive/1/534161/100/0/threaded
secunia.com/advisories/56910
www-01.ibm.com/support/docview.wss?uid=swg21689484
securitytracker.com/id/1030576
oracle.com/technetwork/topics/security/cpujul2014-1972956.html
Show 55 moreShow less
seclists.org/fulldisclosure/2014/Dec/23
nvd.nist.gov/vuln/detail/CVE-2014-4237
github.com/advisories/GHSA-p6vh-m29c-65m2
suse.com/support/update/announcement/2015/suse-su-20150498-1
bugzilla.suse.com/757762