1. CVE-Search
  2. CVE-2008-7234
ID CVE-2008-7234
Summary Unspecified vulnerability in the Oracle BPEL Worklist Application component in Oracle Application Server 10.1.2.2 and 10.1.3.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, aka AS03.
References
Vulnerable Configurations
  • cpe:2.3:a:oracle:application_server:10.1.2.2:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:application_server:10.1.2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:application_server:10.1.3.3:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:application_server:10.1.3.3:*:*:*:*:*:*:*
CVSS
Base: 6.8 (as of 28-07-2021 - 18:40)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:M/Au:N/C:P/I:P/A:P
refmap via4
bid 27229
cert TA08-017A
confirm http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html
hp
  • HPSBMA02133
  • SSRT061201
osvdb 40295
sectrack 1019218
secunia
  • 28518
  • 28556
vupen
  • ADV-2008-0150
  • ADV-2008-0180
saint via4
bid 27229
description Oracle XDB component PITRIG_TRUNCATE buffer overflow
id database_oracle_version
osvdb 40300
title oracle_xdb_pitrig_truncate
type remote
Last major update 28-07-2021 - 18:40
Published 14-09-2009 - 14:30
Last modified 28-07-2021 - 18:40
Back to Top