Oracle Portal Component Security Vulnerabilities and Issues — Oracle Portal Component CVE List

OracleOracle Portal Component

3 matches found

CVE•added 2008/07/15 11:0 p.m.•80 views

CVE-2008-2609

CVE-2008-2609 affects Oracle Portal in Oracle Application Server (9.0.4.3, 10.1.2.3, 10.1.4.2). The CPU July 2008 advisory indicates this vulnerability is exploitable remotely over HTTP without authentication, with a CVSS v2 base score of 6.4 (Network, Low complexity, No authentication; Confident...

6.4CVSS8.8AI score0.0129EPSS

CVE•added 2008/07/15 11:0 p.m.•62 views

CVE-2008-2589

CVE-2008-2589 concerns an SQL injection in Oracle Application Server’s WWV_RENDER_REPORT package used by the Oracle Portal component. Affects Oracle Portal integrated in Oracle Application Server 9.0.4.3, 10.1.2.2, and 10.1.4.1. The vulnerability arises from how the second argument to SHOW execut...

6.4CVSS9.2AI score0.01294EPSS

CVE•added 2008/07/15 11:0 p.m.•51 views

CVE-2008-2583

CVE-2008-2583 affects Oracle Portal’s sample Discussion Forum Portlet (Oracle Application Server 10g). The vulnerability resides in the Discussion Forum Portlet distributed via OTN prior to 20080715, enabling remote exploitation over a network with unknown impact per the initial description, but ...

4.3CVSS8.9AI score0.01143EPSS