CVE-2014-2425
published 2014-04-16CVE-2014-2425: Unspecified vulnerability in the Oracle OpenSSO component in Oracle Fusion Middleware 8.0 Update 2 Patch 5 allows remote authenticated users to affect…
PriorityP416medium4CVSS 2.0
AVNACLAuSCPINAN
EPSS
1.39%
69.4th percentile
Unspecified vulnerability in the Oracle OpenSSO component in Oracle Fusion Middleware 8.0 Update 2 Patch 5 allows remote authenticated users to affect confidentiality via unknown vectors.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| oracle | fusion_middleware | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Oracle OpenSSO 8.0u2 information disclosure (Nessus ID 73738 / SBV-44084)
vuldb·2026-05-11·CVSS 4.0
CVE-2014-2425 [MEDIUM] Oracle OpenSSO 8.0u2 information disclosure (Nessus ID 73738 / SBV-44084)
A vulnerability was found in Oracle OpenSSO 8.0u2. It has been classified as problematic. The impacted element is an unknown function. The manipulation leads to information disclosure.
This vulnerability is traded as CVE-2014-2425. It is possible to initiate the attack remotely. There is no exploit available.
Upgrading the affected component is recommended.
GHSA
GHSA-cg26-85qc-2433: Unspecified vulnerability in the Oracle OpenSSO component in Oracle Fusion Middleware 8
ghsa_unreviewed·2022-05-17
CVE-2014-2425 [MEDIUM] GHSA-cg26-85qc-2433: Unspecified vulnerability in the Oracle OpenSSO component in Oracle Fusion Middleware 8
Unspecified vulnerability in the Oracle OpenSSO component in Oracle Fusion Middleware 8.0 Update 2 Patch 5 allows remote authenticated users to affect confidentiality via unknown vectors.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2014-04-16
Published