CVE-2014-2408
published 2014-04-16CVE-2014-2408: Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to…
PriorityP430medium6.6CVSS 2.0
AVNACHAuSCCICAN
EPSS
1.60%
73.2th percentile
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to the "Grant Any Object Privilege."
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| oracle | database_server | — | — |
| oracle | database_server | — | — |
| oracle | database_server | — | — |
| oracle | database_server | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Oracle Database Server 11.1.0.7/11.2.0.3/11.2.0.4/12.1.0.1 Core RDBMS (Nessus ID 73576 / ID 19884)
vuldb·2026-05-11·CVSS 6.6
CVE-2014-2408 [MEDIUM] Oracle Database Server 11.1.0.7/11.2.0.3/11.2.0.4/12.1.0.1 Core RDBMS (Nessus ID 73576 / ID 19884)
A vulnerability classified as critical was found in Oracle Database Server 11.1.0.7/11.2.0.3/11.2.0.4/12.1.0.1. Affected is an unknown function of the component Core RDBMS. Executing a manipulation can lead to an unknown weakness.
This vulnerability is registered as CVE-2014-2408. It is possible to launch the attack remotely. No exploit is available.
Upgrading the affected component is advised.
GHSA
GHSA-6f2p-5q6g-gmc9: Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11
ghsa_unreviewed·2022-05-17
CVE-2014-2408 [MEDIUM] GHSA-6f2p-5q6g-gmc9: Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to the "Grant Any Object Privilege."
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2014-04-16
Published