medium4.0Public exploit code
CVE-2014-2424
Unspecified vulnerability in the Oracle Event Processing component in Oracle Fusion Middleware 11.1.1.7.0 allows remote authenticated users to affect integrity…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Oracle Event Processing FileUploadServlet - Arbitrary File Upload (Metasploit)2014-07-07 · remote · windows · Verified
Impact
Unspecified vulnerability in the Oracle Event Processing component in Oracle Fusion Middleware 11.1.1.7.0 allows remote authenticated users to affect integrity via vectors related to CEP system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oracle | Fusion Middleware | Version 11.1.1.7.0 |
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/127365/Oracle-Event-Processing-FileUploadServlet-Arbitrary-File-Upload.html
- http://www.exploit-db.com/exploits/33989
- http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html
- http://www.osvdb.org/105844
- http://www.securityfocus.com/bid/66871
- http://packetstormsecurity.com/files/127365/Oracle-Event-Processing-FileUploadServlet-Arbitrary-File-Upload.html
- http://www.exploit-db.com/exploits/33989
- http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html
- http://www.osvdb.org/105844
- http://www.securityfocus.com/bid/66871