Is CVE-2014-6598 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Oracle Communications Applications

CVE-2014-6598

Unspecified vulnerability in the Oracle Communications Diameter Signaling Router component in Oracle Communications Applications 3.x, 4.x, and 5.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Signaling - DPI.

EPSS: 0.045 (90.6th percentile) — read the EPSS interpretation.

Affected products

Oracle Communications_applications — versions 3.0, 4.0, 5.0
N/a — versions n/a

Public proof-of-concept exploits

KPN-CISO/DRA_writeup
KPN-CISO/DRA_

References

secalert_us@oracle.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
secalert_us@oracle.com (vdb-entry, x_refsource_SECTRACK)

Frequently asked questions

What is CVE-2014-6598?: CVE-2014-6598 is a vulnerability in Oracle Communications Applications. Published 2015-01-21.
Is CVE-2014-6598 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.