CVE-2014-2424

Oracle Fusion Middleware 11.1.1.7.0 - Privilege Escalation

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 2 public exploits for CVE-2014-2424. PoCs published by Metasploit, including Metasploit module exploits/windows/http/oracle_event_processing_upload.

AI-analyzed exploit summary This Metasploit module exploits an arbitrary file upload vulnerability in Oracle Event Processing 11.1.1.7.0 via the FileUploadServlet component, allowing unauthenticated attackers to upload malicious files to arbitrary locations due to a directory traversal flaw. It leverages WbemExec for remote code execution on Windows 2003 SP2 or older systems.

Description

Unspecified vulnerability in the Oracle Event Processing component in Oracle Fusion Middleware 11.1.1.7.0 allows remote authenticated users to affect integrity via vectors related to CEP system.

Exploits (2)

exploitdb WORKING POC VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/33989

This Metasploit module exploits an arbitrary file upload vulnerability in Oracle Event Processing 11.1.1.7.0 via the FileUploadServlet component, allowing unauthenticated attackers to upload malicious files to arbitrary locations due to a directory traversal flaw. It leverages WbemExec for remote code execution on Windows 2003 SP2 or older systems.

Classification
Working Poc 100%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Oracle Event Processing 11.1.1.7.0
No auth needed
Prerequisites: Network access to the target server · Oracle Event Processing 11.1.1.7.0 with exposed FileUploadServlet
devstral-2 · analyzed Feb 16, 2026 Full analysis →
metasploit WORKING POC EXCELLENT
rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/oracle_event_processing_upload.rb

This Metasploit module exploits an arbitrary file upload vulnerability in Oracle Event Processing 11.1.1.7.0 via the FileUploadServlet component, which allows unauthenticated directory traversal to upload malicious files. It leverages WbemExec for remote code execution on Windows 2003 SP2 or older systems.

Classification
Working Poc 100%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Oracle Event Processing 11.1.1.7.0
No auth needed
Prerequisites: Network access to the target server · Oracle Event Processing 11.1.1.7.0 with FileUploadServlet exposed
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/105844
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/66871
Exploit, Third Party Advisory exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/33989

Scores

EPSS 0.4808
EPSS Percentile 98.7%

Details

Status published
Products (1)
oracle/fusion_middleware 11.1.1.7.0
Published Apr 16, 2014
Tracked Since Feb 18, 2026