VULNERABILITY INTELLIGENCE
CVE-2014-2406
CVSS score8.5 HIGH
EPSS probability2.16%
CISA KEVNot currently listed
Published2014-04-16
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:S/C:C/I:C/A:C
Description
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to "Advisor" and "Select Any Dictionary" privileges.
Primary references
- secalert_us@oracle.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory