{"$ref":"https://www.cert.ssi.gouv.fr/openapi.json","affected_systems":[{"description":"Oracle Hyperion Common Admin, versions 11.1.2.2, 11.1.2.3","product":{"name":"N/A","vendor":{"name":"Oracle","scada":false}}},{"description":"Oracle Fusion Applications, versions 11.1.2 \u00e0 11.1.8","product":{"name":"N/A","vendor":{"name":"Oracle","scada":false}}},{"description":"Oracle iPlanet Web Proxy Server, version 4.0.24","product":{"name":"N/A","vendor":{"name":"Oracle","scada":false}}},{"description":"Oracle Hyperion Enterprise Performance Management Architect, versions 11.1.2.2, 11.1.2.3","product":{"name":"N/A","vendor":{"name":"Oracle","scada":false}}},{"description":"Oracle Hyperion Analytic Provider Services, versions 11.1.2.2, 11.1.2.3","product":{"name":"N/A","vendor":{"name":"Oracle","scada":false}}},{"description":"Oracle HTTP Server, versions 11.1.1.7.0, 12.1.2.0","product":{"name":"N/A","vendor":{"name":"Oracle","scada":false}}},{"description":"Oracle BI Publisher, version 11.1.1.7","product":{"name":"N/A","vendor":{"name":"Oracle","scada":false}}},{"description":"Oracle Glassfish Communications Server, version 2.0","product":{"name":"N/A","vendor":{"name":"Oracle","scada":false}}},{"description":"Oracle Glassfish Server, versions 2.1.1, 3.0.1, 3.1.2","product":{"name":"N/A","vendor":{"name":"Oracle","scada":false}}},{"description":"Oracle Traffic Director, version 11.1.1.7.0","product":{"name":"N/A","vendor":{"name":"Oracle","scada":false}}},{"description":"Oracle Fusion Middleware 12c Release 1, version 12.1.2.0","product":{"name":"N/A","vendor":{"name":"Oracle","scada":false}}},{"description":"Oracle Fusion Middleware 11g Release 1, version 11.1.1.7","product":{"name":"N/A","vendor":{"name":"Oracle","scada":false}}},{"description":"Oracle iPlanet Web Server, versions 6.1, 7.0","product":{"name":"N/A","vendor":{"name":"Oracle","scada":false}}},{"description":"Oracle JDeveloper, versions 11.1.1.7.0, 11.1.2.4.0, 12.1.2.0.0","product":{"name":"N/A","vendor":{"name":"Oracle","scada":false}}},{"description":"Oracle Hyperion BI+, versions 11.1.2.2, 11.1.2.3","product":{"name":"N/A","vendor":{"name":"Oracle","scada":false}}},{"description":"Oracle WebLogic Server, versions 10.0.2.0, 10.3.6.0, 12.1.1.0, 12.1.2.0","product":{"name":"N/A","vendor":{"name":"Oracle","scada":false}}},{"description":"Oracle WebCenter Portal, versions 11.1.1.7.0, 11.1.1.8.0","product":{"name":"N/A","vendor":{"name":"Oracle","scada":false}}},{"description":"Oracle Hyperion Essbase, versions 11.1.2.2, 11.1.2.3","product":{"name":"N/A","vendor":{"name":"Oracle","scada":false}}}],"affected_systems_content":null,"content":"## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l'\u00e9diteur pour l'obtention des\ncorrectifs (cf. section Documentation).\n","cves":[{"name":"CVE-2013-1741","url":"https://www.cve.org/CVERecord?id=CVE-2013-1741"},{"name":"CVE-2013-1620","url":"https://www.cve.org/CVERecord?id=CVE-2013-1620"},{"name":"CVE-2014-4251","url":"https://www.cve.org/CVERecord?id=CVE-2014-4251"},{"name":"CVE-2014-2493","url":"https://www.cve.org/CVERecord?id=CVE-2014-2493"},{"name":"CVE-2014-4256","url":"https://www.cve.org/CVERecord?id=CVE-2014-4256"},{"name":"CVE-2014-4253","url":"https://www.cve.org/CVERecord?id=CVE-2014-4253"},{"name":"CVE-2014-4222","url":"https://www.cve.org/CVERecord?id=CVE-2014-4222"},{"name":"CVE-2014-2479","url":"https://www.cve.org/CVERecord?id=CVE-2014-2479"},{"name":"CVE-2014-4217","url":"https://www.cve.org/CVERecord?id=CVE-2014-4217"},{"name":"CVE-2014-4211","url":"https://www.cve.org/CVERecord?id=CVE-2014-4211"},{"name":"CVE-2014-4242","url":"https://www.cve.org/CVERecord?id=CVE-2014-4242"},{"name":"CVE-2014-4257","url":"https://www.cve.org/CVERecord?id=CVE-2014-4257"},{"name":"CVE-2014-2481","url":"https://www.cve.org/CVERecord?id=CVE-2014-2481"},{"name":"CVE-2014-4210","url":"https://www.cve.org/CVERecord?id=CVE-2014-4210"},{"name":"CVE-2014-4254","url":"https://www.cve.org/CVERecord?id=CVE-2014-4254"},{"name":"CVE-2014-4249","url":"https://www.cve.org/CVERecord?id=CVE-2014-4249"},{"name":"CVE-2014-4202","url":"https://www.cve.org/CVERecord?id=CVE-2014-4202"},{"name":"CVE-2014-4255","url":"https://www.cve.org/CVERecord?id=CVE-2014-4255"},{"name":"CVE-2014-4201","url":"https://www.cve.org/CVERecord?id=CVE-2014-4201"},{"name":"CVE-2014-4241","url":"https://www.cve.org/CVERecord?id=CVE-2014-4241"},{"name":"CVE-2014-4267","url":"https://www.cve.org/CVERecord?id=CVE-2014-4267"},{"name":"CVE-2013-5855","url":"https://www.cve.org/CVERecord?id=CVE-2013-5855"},{"name":"CVE-2014-4212","url":"https://www.cve.org/CVERecord?id=CVE-2014-4212"},{"name":"CVE-2014-2480","url":"https://www.cve.org/CVERecord?id=CVE-2014-2480"}],"links":[],"reference":"CERTFR-2014-AVI-313","revisions":[{"description":"version initiale.","revision_date":"2014-07-16T00:00:00.000000"}],"risks":[{"description":"Atteinte \u00e0 l'int\u00e9grit\u00e9 des donn\u00e9es"},{"description":"D\u00e9ni de service"},{"description":"Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"}],"summary":"De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans <span\nclass=\"textit\">Oracle Fusion Middleware</span>. Elles permettent \u00e0 un\nattaquant de provoquer un d\u00e9ni de service, une atteinte \u00e0 l'int\u00e9grit\u00e9\ndes donn\u00e9es et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.\n","title":"Multiples vuln\u00e9rabilit\u00e9s dans Oracle Fusion Middleware","vendor_advisories":[{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Oracle du 16 juillet 2014","url":"http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html"}]}
