Vulnerability Details CVE-2014-2424
Unspecified vulnerability in the Oracle Event Processing component in Oracle Fusion Middleware 11.1.1.7.0 allows remote authenticated users to affect integrity via vectors related to CEP system.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.778
EPSS Ranking 98.9%
CVSS Severity
CVSS v2 Score 4.0
References
- http://packetstormsecurity.com/files/127365/Oracle-Event-Processing-FileUploadServlet-Arbitrary-File-Upload.html
- http://www.exploit-db.com/exploits/33989
- http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html
- http://www.osvdb.org/105844
- http://www.securityfocus.com/bid/66871
- http://packetstormsecurity.com/files/127365/Oracle-Event-Processing-FileUploadServlet-Arbitrary-File-Upload.html
- http://www.exploit-db.com/exploits/33989
- http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html
- http://www.osvdb.org/105844
- http://www.securityfocus.com/bid/66871
Products affected by CVE-2014-2424
-
cpe:2.3:a:oracle:fusion_middleware:11.1.1.7.0