CVEs-PoC/2014/CVE-2014-2404.md

### [CVE-2014-2404](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2404)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 10.1.4.3, 11.1.1.3.0, 11.1.1.5.0, 11.1.1.7.0, 11.1.2.0.0, 11.1.2.1.0, and 11.1.2.2.0 allows remote authenticated users to affect confidentiality via unknown vectors related to WebGate.

### POC

#### Reference
- http://packetstormsecurity.com/files/127047/Oracle-Access-Manager-Information-Disclosure.html
- http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html

#### Github
No PoCs found on GitHub currently.