CVE-2008-2609

2008-07-1523:41:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2008-2609

oracle

portal

application server

vulnerability

remote attack

6.3 Medium

AI Score

Confidence

Low

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.003 Low

EPSS

Percentile

67.7%

JSON

Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3, 10.1.2.3, and 10.1.4.2 has unknown impact and remote attack vectors.

CPENameOperatorVersion
oracle:oracle_application_serveroracle oracle application servereq10.1.4.2
oracle:application_serveroracle application servereq9.0.4.3
oracle:oracle_application_serveroracle oracle application servereq10.1.2.3
oracle:oracle_portal_componentoracle oracle portal componenteq*

CPE	Name	Operator	Version
oracle:oracle_application_server	oracle oracle application server	eq	10.1.4.2
oracle:application_server	oracle application server	eq	9.0.4.3
oracle:oracle_application_server	oracle oracle application server	eq	10.1.2.3
oracle:oracle_portal_component	oracle oracle portal component	eq	*