Lucene search

[email protected]CVE-2007-2123

HistoryApr 18, 2007 - 6:19 p.m.

CVE-2007-2123

2007-04-1818:19:00

[email protected]

web.nvd.nist.gov

cve-2007-2123

portal component

oracle application server

nvd

as04

9 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.005 Low

EPSS

Percentile

77.2%

JSON

Unspecified vulnerability in the Portal component in Oracle Application Server 10.1.3 up to 10.1.3.2.0, 10.1.2 up to 10.1.2.2.0, and 9.0.4.3 has unknown impact and attack vectors, aka AS04.

Affected configurations

NVD

Node

oracleapplication_serverMatch9.0.4.3

oracleapplication_serverMatch10.1.2.0.0

oracleapplication_serverMatch10.1.2.0.2

oracleapplication_serverMatch10.1.2.2

oracleapplication_serverMatch10.1.3.0

oracleapplication_serverMatch10.1.3.2.0

CPENameOperatorVersion
oracle:application_serveroracle application servereq9.0.4.3
oracle:application_serveroracle application servereq10.1.2.0.0
oracle:application_serveroracle application servereq10.1.2.0.2
oracle:application_serveroracle application servereq10.1.2.2
oracle:application_serveroracle application servereq10.1.3.0
oracle:application_serveroracle application servereq10.1.3.2.0

CPE	Name	Operator	Version
oracle:application_server	oracle application server	eq	9.0.4.3
oracle:application_server	oracle application server	eq	10.1.2.0.0
oracle:application_server	oracle application server	eq	10.1.2.0.2
oracle:application_server	oracle application server	eq	10.1.2.2
oracle:application_server	oracle application server	eq	10.1.3.0
oracle:application_server	oracle application server	eq	10.1.3.2.0

References

www.oracle.com/technetwork/topics/security/cpuapr2007-090632.html

www.red-database-security.com/advisory/oracle_cpu_apr_2007.html

www.securityfocus.com/archive/1/466329/100/200/threaded

www.securityfocus.com/bid/23532

www.securitytracker.com/id?1017927

www.us-cert.gov/cas/techalerts/TA07-108A.html

www.vupen.com/english/advisories/2007/1426

9 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.005 Low

EPSS

Percentile

77.2%

JSON

Related for CVE-2007-2123

cvelist1 prion1 nvd1 nessus1