CVE-2014-2400

🗓️ 16 Apr 2014 01:00:00Reported by oracleType

cve🔗 web.nvd.nist.gov👁 50 Views🌐 WEB

Unspecified vulnerability in Oracle Endeca Server component in Oracle Fusion Middleware 2.2.

Reporter	Title	Published	Views	Family All 10
Cvelist	CVE-2014-2400	16 Apr 201401:00	–	cvelist
EUVD	EUVD-2014-2436	7 Oct 202500:30	–	euvd
NVD	CVE-2014-2400	16 Apr 201401:55	–	nvd
Oracle	Oracle Critical Patch Update - April 2014	15 Apr 201400:00	–	oracle
Oracle	Oracle Critical Patch Update - April 2014	15 Apr 201400:00	–	oracle
Packet Storm	Endeca Latitude 2.2.2 Cross Site Scripting	25 Jun 201400:00	–	packetstorm
Prion	Design/Logic Flaw	16 Apr 201401:55	–	prion
Prion	Design/Logic Flaw	16 Apr 201401:55	–	prion
securityvulns	[RT-SA-2013-003] Endeca Latitude Cross-Site Scripting	15 Oct 201400:00	–	securityvulns
securityvulns	Oracle / Sun / MySQL / PeopleSoft / OpenJDK applications multiple security vulnerabilities	2 May 201400:00	–	securityvulns

NVD

Node

Source	Link
securityfocus	www.securityfocus.com/archive/1/532557/100/0/threaded
seclists	www.seclists.org/fulldisclosure/2014/Jun/124
securityfocus	www.securityfocus.com/bid/66857
oracle	www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html
packetstormsecurity	www.packetstormsecurity.com/files/127223/Endeca-Latitude-2.2.2-Cross-Site-Scripting.html

Parameter	Position	Path	Description	CWE
op	query param	/config?op=<supported-operation>	Cross-Site Scripting via unsanitized HTTP GET parameter op.	CWE-79
op	query param	/admin?op=<supported-operation>	Cross-Site Scripting via unsanitized HTTP GET parameter op.	CWE-79

06 May 2026 22:30Current

5.7Medium risk

Vulners AI Score5.7

CVSS 24.3

EPSS0.00442