Curated security research, vulnerabilities, advisories and tools for practitioners.

← back | CVE Intelligence

CVE-2014-4278

Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2014-4278.

Coverage Span: 2014-10-14
Reports: 1 related reports

Associated Reports & Timeline

Advisory: Oracle Forms 10g Unauthenticated Remote Code Execution (CVE-2014-4278)

Oracle Forms 10g fails to validate the ifip parameter passed to ListenerServlet, letting unauthenticated attackers execute arbitrary commands; E-Business Suite 12.0.6-12.2.4 is also affected.