Lucene search
CVE-2014-2424
Unspecified vulnerability in Oracle Event Processing component in Oracle Fusion Middleware 11.1.1.7.
Show more
| Reporter | Title | Published | Views | Family All 13 |
|---|---|---|---|---|
 | CVE-2014-2424 | 16 Apr 201402:55 | – | nvd |
 | Oracle Event Processing FileUploadServlet Arbitrary File Upload | 8 Jul 201400:00 | – | seebug |
 | CVE-2014-2424 | 16 Apr 201402:05 | – | cvelist |
 | Oracle Event Processing CVE-2014-2424 Unspecified Vulnerability (April 2014 CPU) | 20 May 201400:00 | – | nessus |
 | Oracle Event Processing FileUploadServlet Remote Code Execution Vulnerability | 21 Apr 201400:00 | – | zdi |
 | Oracle Event Processing FileUploadServlet Arbitrary File Upload | 6 Jul 201400:00 | – | packetstorm |
 | Oracle Event Processing FileUploadServlet Arbitrary File Upload Exploit | 6 Jul 201400:00 | – | zdt |
 | Oracle Event Processing FileUploadServlet Directory Traversal (CVE-2014-2424) | 24 Aug 201400:00 | – | checkpoint_advisories |
 | Oracle Event Processing FileUploadServlet Arbitrary File Upload | 29 Jun 201420:44 | – | metasploit |
 | Design/Logic Flaw | 16 Apr 201402:55 | – | prion |
10
Node
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| Filename | request body | /wlevs/visualizer/upload | This endpoint allows arbitrary file upload due to a directory traversal vulnerability. | CWE-22, CWE-434 |
| uploadfile | request body | /wlevs/visualizer/upload | This endpoint allows arbitrary file upload due to a directory traversal vulnerability. | CWE-22, CWE-434 |
| navSetId | query param | /ohw/help/state | This endpoint is used to check the version of Oracle Event Processing. | |
| navId | query param | /ohw/help/state | This endpoint is used to check the version of Oracle Event Processing. | |
| destination | query param | /ohw/help/state | This endpoint is used to check the version of Oracle Event Processing. |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo16 Apr 2014 02:55Current
5.3Medium risk
Vulners AI Score5.3
CVSS24
EPSS0.7776