CVE-2014-2424

Published: Apr 16, 2014Modified: May 6, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

Unspecified vulnerability in the Oracle Event Processing component in Oracle Fusion Middleware 11.1.1.7.0 allows remote authenticated users to affect integrity via vectors related to CEP system.

Affected (1)

Products: Oracle: Fusion Middleware

Oracle

1 product

Fusion Middleware

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Oracle Fusion Middleware	Version 11.1.1.7.0

References (10)

http://packetstormsecurity.com/files/127365/Oracle-Event-Processing-FileUploadServlet-Arbitrary-File-Upload.html

Source: secalert_us@oracle.com

http://www.exploit-db.com/exploits/33989

Source: secalert_us@oracle.com

http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html

Source: secalert_us@oracle.com

Vendor Advisory

http://www.osvdb.org/105844

Source: secalert_us@oracle.com

http://www.securityfocus.com/bid/66871

Source: secalert_us@oracle.com

http://packetstormsecurity.com/files/127365/Oracle-Event-Processing-FileUploadServlet-Arbitrary-File-Upload.html