Vulnerability Details CVE-2014-2424
Unspecified vulnerability in the Oracle Event Processing component in Oracle Fusion Middleware 11.1.1.7.0 allows remote authenticated users to affect integrity via vectors related to CEP system.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.8
EPSS Ranking 99.1%
CVSS Severity
CVSS v2 Score 4.0
References
- http://packetstormsecurity.com/files/127365/Oracle-Event-Processing-FileUploadServlet-Arbitrary-File-Upload.html
- http://www.exploit-db.com/exploits/33989
- http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html
- http://www.osvdb.org/105844
- http://www.securityfocus.com/bid/66871
- http://packetstormsecurity.com/files/127365/Oracle-Event-Processing-FileUploadServlet-Arbitrary-File-Upload.html
- http://www.exploit-db.com/exploits/33989
- http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html
- http://www.osvdb.org/105844
- http://www.securityfocus.com/bid/66871
Products affected by CVE-2014-2424
-
cpe:2.3:a:oracle:fusion_middleware:11.1.1.7.0