CVE-2009-1017

2009-04-1510:30:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2009-1017

oracle

bi publisher

vulnerability

remote authentication

confidentiality

nvd

5.6 Medium

AI Score

Confidence

Low

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

55.2%

JSON

Unspecified vulnerability in the BI Publisher component in Oracle Application Server 5.6.2, 10.1.3.2.1, 10.1.3.3.3, and 10.1.3.4 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2009-0994.

CPENameOperatorVersion
oracle:application_serveroracle application servereq5.6.2
oracle:application_serveroracle application servereq10.1.3.4
oracle:application_serveroracle application servereq10.1.3.2.1
oracle:application_serveroracle application servereq10.1.3.3.3

CPE	Name	Operator	Version
oracle:application_server	oracle application server	eq	5.6.2
oracle:application_server	oracle application server	eq	10.1.3.4
oracle:application_server	oracle application server	eq	10.1.3.2.1
oracle:application_server	oracle application server	eq	10.1.3.3.3