Multiple unspecified vulnerabilities in Oracle E-Business Suite 12.0.3 allow (1)...
Vulnerability Description
Multiple unspecified vulnerabilities in Oracle E-Business Suite 12.0.3 allow (1) local users to affect confidentiality and integrity via unknown vectors related to the Mobile Application Server component (APP01); (2) remote attackers to affect confidentiality via unknown vectors related to the Oracle Applications Framework (APP03); remote authenticated users to affect confidentiality and integrity via unknown vectors related to the (3) CRM Technical Foundation (APP05) and (4) Oracle Application Object Library (APP06); and remote authenticated users to affect integrity and availability via unknown vectors related to (5) Oracle Applications Technology Stack (APP07).
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-7238
Credits & Attribution
No credits recorded in the NVD database.
References
- http://securitytracker.com/id?1019218
- http://www.securityfocus.com/bid/27229
- http://www.us-cert.gov/cas/techalerts/TA08-017A.html
- http://www.vupen.com/english/advisories/2008/0150
- http://www.osvdb.org/40286
- http://www.vupen.com/english/advisories/2008/0180
- http://www.osvdb.org/40290
- http://marc.info/?l=bugtraq&m=120058413923005&w=2
- http://www.osvdb.org/40284
- http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html
- http://marc.info/?l=bugtraq&m=120058413923005&w=2
- http://secunia.com/advisories/28556
- http://www.osvdb.org/40288
- http://secunia.com/advisories/28518
- http://www.osvdb.org/40289
More from oracle
View All →Affected Vendor
oracle
View all reports →Affected Software
Timeline
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.