CVE-2014-2424

Oracle Fusion Middleware 11.1.1.7.0 - Privilege Escalation

Title source: llm

Description

Unspecified vulnerability in the Oracle Event Processing component in Oracle Fusion Middleware 11.1.1.7.0 allows remote authenticated users to affect integrity via vectors related to CEP system.

Exploits (2)

exploitdb WORKING POC VERIFIED

by Metasploit · rubyremotewindows

https://www.exploit-db.com/exploits/33989

View Code ZIP pw:eip

metasploit WORKING POC EXCELLENT

rubypocwin

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/oracle_event_processing_upload.rb

View Code ZIP pw:eip

References (5)

[Vendor Advisory] http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html

[Third Party Advisory, VDB Entry] http://www.osvdb.org/105844

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/66871

[Exploit, Third Party Advisory] http://www.exploit-db.com/exploits/33989

[Exploit, Third Party Advisory] http://packetstormsecurity.com/files/127365/Oracle-Event-Processing-FileUploadServlet-Arbitrary-File-Upload.html

Scores

EPSS 0.8002

EPSS Percentile 99.1%

Details

Status published

Products (1)

oracle/fusion_middleware 11.1.1.7.0

Published Apr 16, 2014

Tracked Since Feb 18, 2026