National Vulnerability Database

National Vulnerability Database

National Vulnerability
Database

Vulnerability Change Record for CVE-2014-0050

Change History

Modified Analysis - 11/5/2015 2:10:02 PM

Action Type Old Value New Value
Changed CVSS V2
(AV:N/AC:L/Au:N/C:N/I:N/A:P)
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Added Evaluator Description
The previous CVSS assessment ( Base Score: 5.0 -  AV:N/AC:L/AU:N/C:N/I:N/A:P) was provided at the time of initial analysis based on the best available published information at that time.  The score has been updated to reflect the impact to Oracle products per <a href=http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html> Oracle Critical Patch Update Advisory - October 2015 </a>. Other products listed as vulnerable may or may not be similarly impacted.
Changed CPE Configuration
Configuration 1
     OR
          *cpe:2.3:a:apache:tomcat:7.0.0:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.0:beta:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.1:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.10:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.11:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.12:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.13:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.14:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.15:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.16:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.17:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.18:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.19:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.2:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.2:beta:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.20:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.21:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.22:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.23:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.24:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.25:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.26:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.27:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.28:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.29:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.3:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.30:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.31:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.32:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.33:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.34:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.35:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.36:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.37:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.38:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.39:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.4:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.4:beta:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.40:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.41:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.42:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.43:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.44:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.45:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.46:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.47:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.48:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.49:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.5:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.50:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.6:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.7:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.8:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.9:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:8.0.0:rc5:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:8.0.1:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:8.0.0:rc10:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:8.0.0:rc1:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:8.0.0:rc2:*:*:*:*:*:*
          *cpe:2.3:a:apache:commons_fileupload:1.0:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:commons_fileupload:1.1:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:commons_fileupload:1.1.1:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:commons_fileupload:1.2:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:commons_fileupload:1.2.1:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:commons_fileupload:1.2.2:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:commons_fileupload:1.3:*:*:*:*:*:*:* (and previous)
Configuration 1
     OR
          *cpe:2.3:a:apache:tomcat:7.0.0:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.0:beta:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.1:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.10:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.11:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.12:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.13:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.14:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.15:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.16:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.17:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.18:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.19:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.2:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.2:beta:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.20:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.21:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.22:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.23:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.24:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.25:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.26:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.27:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.28:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.29:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.3:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.30:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.31:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.32:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.33:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.34:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.35:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.36:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.37:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.38:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.39:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.4:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.4:beta:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.40:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.41:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.42:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.43:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.44:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.45:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.46:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.47:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.48:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.49:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.5:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.50:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.6:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.7:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.8:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:7.0.9:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:8.0.0:rc5:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:8.0.1:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:8.0.0:rc10:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:8.0.0:rc1:*:*:*:*:*:*
          *cpe:2.3:a:apache:tomcat:8.0.0:rc2:*:*:*:*:*:*
          *cpe:2.3:a:apache:commons_fileupload:1.0:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:commons_fileupload:1.1:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:commons_fileupload:1.1.1:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:commons_fileupload:1.2:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:commons_fileupload:1.2.1:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:commons_fileupload:1.2.2:*:*:*:*:*:*:*
          *cpe:2.3:a:apache:commons_fileupload:1.3:*:*:*:*:*:*:* (and previous)
Configuration 2
     OR
          *cpe:2.3:a:oracle:retail_applications:12.0:*:*:*:*:*:*:*
          *cpe:2.3:a:oracle:retail_applications:12.0in:*:*:*:*:*:*:*
          *cpe:2.3:a:oracle:retail_applications:13.0:*:*:*:*:*:*:*
          *cpe:2.3:a:oracle:retail_applications:13.1:*:*:*:*:*:*:*
          *cpe:2.3:a:oracle:retail_applications:13.2:*:*:*:*:*:*:*
          *cpe:2.3:a:oracle:retail_applications:13.3:*:*:*:*:*:*:*
          *cpe:2.3:a:oracle:retail_applications:13.4:*:*:*:*:*:*:*
          *cpe:2.3:a:oracle:retail_applications:14.0:*:*:*:*:*:*:*