CVE Vulnerability

CVE-2008-7234

Unspecified vulnerability in the Oracle BPEL Worklist Application component in Oracle Application Server 10.1.2.2 and 10.1.3.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, aka AS03.

6.8 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 8.6 / Impact : 6.4

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

Scope

References
Link Resource
http://www.securityfocus.com/bid/27229 Exploit Third Party Advisory
http://www.vupen.com/english/advisories/2008/0150 Patch Third Party Advisory
http://secunia.com/advisories/28518 Third Party Advisory
http://www.us-cert.gov/cas/techalerts/TA08-017A.html Patch Third Party Advisory
http://securitytracker.com/id?1019218 Patch Third Party Advisory
http://secunia.com/advisories/28556 Third Party Advisory
http://www.vupen.com/english/advisories/2008/0180 Patch Third Party Advisory
http://www.osvdb.org/40295 Broken Link
http://marc.info/?l=bugtraq&m=120058413923005&w=2 Issue Tracking Mailing List
http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html Broken Link
Configurations

Configuration 1

cpe:2.3:a:oracle:application_server:10.1.2.2:*:*:*:*:*:*:*
cpe:2.3:a:oracle:application_server:10.1.3.3:*:*:*:*:*:*:*
Information

Published : 2009-09-14 02:30

Updated : 2021-07-28 06:40

NVD link : CVE-2008-7234

Mitre link : CVE-2008-7234

Products Affected

Oracle

CWE
NVD-CWE-noinfo