Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2014-2399
HistoryApr 16, 2014 - 1:55 a.m.

CVE-2014-2399

2014-04-1601:55:10
[email protected]
web.nvd.nist.gov
2

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.6

Confidence

Low

EPSS

0.653

Percentile

97.9%

JSON

Unspecified vulnerability in the Oracle Endeca Server component in Oracle Fusion Middleware 2.2.2 allows remote attackers to affect integrity via unknown vectors related to Oracle Endeca Information Discovery (Formerly Latitude), a different vulnerability than CVE-2014-2400.

Affected configurations

NVD
Node
oraclefusion_middlewareMatch2.2.2

Related

prion 2
cvelist 2
nvd 1
cve 2
securityvulns 3
exploitpack 1
packetstorm 2
zdt 1
exploitdb 1
oracle 1
prion
prion
Design/Logic Flaw
2014-04-16 01:55:00
Design/Logic Flaw
2014-04-16 01:55:00
cvelist
cvelist
CVE-2014-2399
2014-04-16 01:00:00
CVE-2014-2400
2014-04-16 01:00:00
nvd
nvd
CVE-2014-2400
2014-04-16 01:55:10
cve
cve
CVE-2014-2399
2014-04-16 01:55:10
CVE-2014-2400
2014-04-16 01:55:10
securityvulns
securityvulns
[RT-SA-2013-002] Endeca Latitude Cross-Site Request Forgery
2014-10-15 00:00:00
[RT-SA-2013-003] Endeca Latitude Cross-Site Scripting
2014-10-15 00:00:00
Oracle / Sun / MySQL / PeopleSoft / OpenJDK applications multiple security vulnerabilities
2014-05-02 00:00:00
exploitpack
exploitpack
Endeca Latitude 2.2.2 - Cross-Site Request Forgery
2014-06-27 00:00:00
packetstorm
packetstorm
Endeca Latitude 2.2.2 Cross Site Scripting
2014-06-25 00:00:00
Endeca Latitude 2.2.2 Cross Site Request Forgery
2014-06-25 00:00:00
zdt
zdt
Endeca Latitude 2.2.2 - CSRF Vulnerability
2014-06-27 00:00:00
exploitdb
exploitdb
Endeca Latitude 2.2.2 - Cross-Site Request Forgery
2014-06-27 00:00:00
oracle
oracle
Oracle Critical Patch Update - April 2014
2014-04-15 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.6

Confidence

Low

EPSS

0.653

Percentile

97.9%

JSON
Related for NVD:CVE-2014-2399
prion2cvelist2nvd1cve2securityvulns3exploitpack1packetstorm2zdt1exploitdb1oracle1