CVE-2007-2130
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
AI Score
Confidence
Low
EPSS
Percentile
83.5%
Unspecified vulnerability in Workflow Cartridge, as used in Oracle Database Server 9.2.0.1, 10.1.0.2, and 10.2.0.1; Application Server 9.0.4.3 and 10.1.2.0.2; Collaboration Suite 10.1.2; and E-Business Suite; has unknown impact and remote authenticated attack vectors, aka OWF01.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| oracle | application_server | 9.0.4.3 | cpe:2.3:a:oracle:application_server:9.0.4.3:*:*:*:*:*:*:* |
| oracle | application_server | 10.1.2.0.2 | cpe:2.3:a:oracle:application_server:10.1.2.0.2:*:*:*:*:*:*:* |
| oracle | collaboration_suite | 10.1.2 | cpe:2.3:a:oracle:collaboration_suite:10.1.2:*:*:*:*:*:*:* |
| oracle | database_server | 9.2.0.1 | cpe:2.3:a:oracle:database_server:9.2.0.1:*:*:*:*:*:*:* |
| oracle | database_server | 10.1.0.2 | cpe:2.3:a:oracle:database_server:10.1.0.2:*:*:*:*:*:*:* |
| oracle | database_server | 10.2.0.1 | cpe:2.3:a:oracle:database_server:10.2.0.1:*:*:*:*:*:*:* |
| oracle | e-business_suite | * | cpe:2.3:a:oracle:e-business_suite:*:*:*:*:*:*:*:* |
References
www.integrigy.com/security-resources/analysis/Integrigy_Oracle_CPU_April_2007_Analysis.pdf
www.oracle.com/technetwork/topics/security/cpuapr2007-090632.html
www.red-database-security.com/advisory/oracle_cpu_apr_2007.html
www.securityfocus.com/archive/1/466329/100/200/threaded
www.securityfocus.com/bid/23532
www.securitytracker.com/id?1017927
www.us-cert.gov/cas/techalerts/TA07-108A.html
www.vupen.com/english/advisories/2007/1426
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
AI Score
Confidence
Low
EPSS
Percentile
83.5%