CVE-2014-3566 in Oracle Endeca Serverinfo

Summary

The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservation

05/14/2014

Disclosure

10/14/2014

Entries

VulDB provides additional information and datapoints for this CVE:

IDVulnerabilityCWEExpCouCVE
103829Oracle Endeca Server OpenSSL cryptographic issue310AttackedOfficial fixCVE-2014-3566
103782Oracle Database Server DBMS_LDAP cryptographic issue310AttackedOfficial fixCVE-2014-3566
92602HP VAN SDN Controller SSLv3 POODLE cryptographic issue310AttackedOfficial fixCVE-2014-3566
90111Oracle Sun Network QDR InfiniBand Gateway Switch cryptographic issue310AttackedOfficial fixCVE-2014-3566
90110Oracle Sun Data Center InfiniBand Switch 36 cryptographic issue310AttackedOfficial fixCVE-2014-3566
82677Oracle Solaris Cluster GlassFish Server cryptographic issue310AttackedOfficial fixCVE-2014-3566
77870Apple Xcode IDE Xcode Server cryptographic issue310AttackedOfficial fixCVE-2014-3566
74941Oracle VM Server MGMT XML interface cryptographic issue310AttackedOfficial fixCVE-2014-3566
68905Apple Mac OS X cryptographic issue310AttackedOfficial fixCVE-2014-3566
68795Oracle Secure Global Desktop Protocol cryptographic issue310AttackedOfficial fixCVE-2014-3566
68781Oracle SPARC Enterprise M3000/M4000/M5000/M8000/M9000 XCP Firmware cryptographic issue310AttackedOfficial fixCVE-2014-3566
68780Oracle Fujitsu M10-1/M10-4/M10-4S Servers XCP Firmware cryptographic issue310AttackedOfficial fixCVE-2014-3566
68757Oracle Java SE JSSE cryptographic issue310AttackedOfficial fixCVE-2014-3566
68695Oracle Enterprise Manager Ops Center Update Provisioning cryptographic issue310AttackedOfficial fixCVE-2014-3566
67791OpenSSL SSLv3 Downgrade POODLE cryptographic issue310AttackedOfficial fixCVE-2014-3566

Description

CPE

CWE

CVSS

Exploits

History

Diff

Relate

Threat Intelligence

API JSON

API XML

API CSV

Sources

◂ PreviousOverviewNext ▸

Do you need the next level of professionalism?

Upgrade your account now!