What is CVE-2014-2424?

CVE-2014-2424 is a vulnerability in Oracle Fusion Middleware. Published 2014-04-16.

Is CVE-2014-2424 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Oracle Fusion Middleware

CVE-2014-2424

Unspecified vulnerability in the Oracle Event Processing component in Oracle Fusion Middleware 11.1.1.7.0 allows remote authenticated users to affect integrity via vectors related to CEP system.

Published 2014-04-16 · last modified 2026-06-17.

CVSS v2 metric

CVSS v2 base score 4.0 (Medium). Vector: AV:N/AC:L/Au:S/C:N/I:P/A:N. This CVE predates CVSS v3 and has no v3 score from NVD.

EPSS exploit prediction

EPSS: 0.474 (98.8th percentile), scored 2026-09-30.

Moderate probability of exploitation in the next 30 days — watch for active exploitation reports. 99th percentile — 98.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.484 · newest: 0.474 · change: -0.009

Affected products

Oracle Fusion Middleware — versions 11.1.1.7.0

Public proof-of-concept exploits

rapid7/metasploit-framework

References

www.osvdb.org/105844 (vdb-entry)
www.securityfocus.com/bid/66871 (vdb-entry)
www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html (Vendor Advisory)
packetstormsecurity.com/files/127365/Oracle-Event-Processing-FileUploadServlet-…
www.exploit-db.com/exploits/33989 (exploit)

Frequently asked questions

What is CVE-2014-2424?: CVE-2014-2424 is a vulnerability in Oracle Fusion Middleware. Published 2014-04-16.
Is CVE-2014-2424 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.