Vulnerability Details : CVE-2014-2424

Public exploit exists!
Unspecified vulnerability in the Oracle Event Processing component in Oracle Fusion Middleware 11.1.1.7.0 allows remote authenticated users to affect integrity via vectors related to CEP system.
Published 2014-04-16 02:55:16
Updated 2014-07-24 04:59:30
Source Oracle
View at NVD,   CVE.org

Products affected by CVE-2014-2424

Exploit prediction scoring system (EPSS) score for CVE-2014-2424

EPSS FAQ
97.29%
Probability of exploitation activity in the next 30 days EPSS Score History
~ 100 %
Percentile, the proportion of vulnerabilities that are scored at or less

Metasploit modules for CVE-2014-2424

  • Oracle Event Processing FileUploadServlet Arbitrary File Upload
    Disclosure Date: 2014-04-21
    First seen: 2020-04-26
    exploit/windows/http/oracle_event_processing_upload
    This module exploits an arbitrary file upload vulnerability in Oracle Event Processing 11.1.1.7.0. The FileUploadServlet component, which requires no authentication, can be abused to upload a malicious file onto an arbitrary location due to a directory traversal flaw

CVSS scores for CVE-2014-2424

Base Score Base Severity CVSS Vector Exploitability Score Impact Score Score Source First Seen
4.0
 MEDIUM AV:N/AC:L/Au:S/C:N/I:P/A:N
8.0
2.9
 NIST

References for CVE-2014-2424

Jump to
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!
Accept Close