Vulnerability Database

300,830

Total vulnerabilities in the database

CVE-2014-2406

Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to "Advisor" and "Select Any Dictionary" privileges.

  • Published: Apr 16, 2014
  • Updated: Nov 9, 2025
  • CVE: CVE-2014-2406
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 8.5
  • AV:N/AC:M/Au:S/C:C/I:C/A:C

No CWE or OWASP classifications available.

Software From Fixed in
oracle / database_server 11.2.0.4 11.2.0.4.x
oracle / database_server 11.2.0.3 11.2.0.3.x
oracle / database_server 12.1.0.1 12.1.0.1.x
oracle / database_server 11.1.0.7 11.1.0.7.x