Vulnerability Database

290,206

Total vulnerabilities in the database

CVE-2014-2408

Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to the "Grant Any Object Privilege."

  • Published: Apr 16, 2014
  • Updated: Apr 13, 2023
  • CVE: CVE-2014-2408
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.6
  • AV:N/AC:H/Au:S/C:C/I:C/A:N

No CWE or OWASP classifications available.

Software From Fixed in
oracle / database_server 11.2.0.4 11.2.0.4.x
oracle / database_server 11.2.0.3 11.2.0.3.x
oracle / database_server 12.1.0.1 12.1.0.1.x
oracle / database_server 11.1.0.7 11.1.0.7.x