Lucene search

K
cve[email protected]CVE-2008-7238
HistorySep 14, 2009 - 2:30 p.m.

CVE-2008-7238

2009-09-1414:30:00
web.nvd.nist.gov
24
oracle
e-business suite
12.0.3
vulnerabilities
confidentiality
integrity
availability
nvd
security
oracle applications framework
crm technical foundation
oracle application object library
oracle applications technology stack
cve-2008-7238

6 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

5.6 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

58.5%

Multiple unspecified vulnerabilities in Oracle E-Business Suite 12.0.3 allow (1) local users to affect confidentiality and integrity via unknown vectors related to the Mobile Application Server component (APP01); (2) remote attackers to affect confidentiality via unknown vectors related to the Oracle Applications Framework (APP03); remote authenticated users to affect confidentiality and integrity via unknown vectors related to the (3) CRM Technical Foundation (APP05) and (4) Oracle Application Object Library (APP06); and remote authenticated users to affect integrity and availability via unknown vectors related to (5) Oracle Applications Technology Stack (APP07).

Affected configurations

NVD
Node
oraclee-business_suiteMatch12.0.3

6 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

5.6 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

58.5%

Related for CVE-2008-7238