CVE-2014-2406

Published: Apr 16, 2014Modified: May 6, 2026

8.5

Vector

AV:N/AC:M/Au:S/C:C/I:C/A:C

Exploitability: 6.8 / Impact: 10.0

Source: NVD

Description

Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to "Advisor" and "Select Any Dictionary" privileges.

Affected (4)

Products: Oracle: Database Server

Oracle

1 product

Database Server

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Oracle Database Server	Version 11.1.0.7
Oracle Database Server	Version 11.2.0.3
Oracle Database Server	Version 11.2.0.4
Oracle Database Server	Version 12.1.0.1

References (2)

http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html

Source: secalert_us@oracle.com

Vendor Advisory

http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.