Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2014-2424 — Oracle Fusion Middleware vulnerability

7 documents7 sources
Severity
4.0MEDIUMNVD
EPSS
80.0%
top 0.89%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Oracle Fusion Middleware
Timeline
PublishedApr 16
Latest updateMay 17

Description

Unspecified vulnerability in the Oracle Event Processing component in Oracle Fusion Middleware 11.1.1.7.0 allows remote authenticated users to affect integrity via vectors related to CEP system.

CVSS vector

AV:N/AC:L/C:N/I:P/A:NExploitability: 8.0 | Impact: 2.9

Affected Packages1 packages

▶NVDoracle/fusion_middleware11.1.1.7.0

🔴Vulnerability Details

2
GHSA
GHSA-vjc7-vhmq-3cwg: Unspecified vulnerability in the Oracle Event Processing component in Oracle Fusion Middleware 11↗2022-05-17
▶
CVEList
CVE-2014-2424: Unspecified vulnerability in the Oracle Event Processing component in Oracle Fusion Middleware 11↗2014-04-16
▶

💥Exploits & PoCs

1
Exploit-DB
Oracle Event Processing FileUploadServlet - Arbitrary File Upload (Metasploit)↗2014-07-07
▶

🔍Detection Rules

1
Suricata
ET WEB_SPECIFIC_APPS Oracle Event Processing FileUploadServlet Arbitrary File Upload↗2014-07-08
▶
CVE-2014-2424 — Oracle Fusion Middleware vulnerability | cvebase