{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Oracle Developer Suite, versions 6i, 9.0.4.3 et 10.1.2.0.2 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Database 10g Release 1, versions 10.1.0.3, 10.1.0.4 et 10.1.0.5 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle E-Business Suite Release 11.0 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle9i Database Release 2, versions 9.2.0.5, 9.2.0.6, 9.2.0.7 et 9.2.0.8 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle8i Database Release 3, version 8.1.7.4 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Database 10g Release 2, versions 10.2.0.1, 10.2.0.2 et 10.2.0.3 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle9i Application Server Release 1, version 1.0.2.2 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle PeopleSoft Enterprise PeopleTools versions 8.22, 8.47 et 8.48 ;",
      "product": {
        "name": "PeopleSoft",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle9i Application Server Release 2, version 9.0.2.3 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Application Server 10g Release 2, versions 10.1.2.0.0 - 10.1.2.0.2, 10.1.2.1.0 et 10.1.2.2.0 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Application Server 10g Release 3, versions 10.1.3.0.0 et 10.1.3.1.0 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Enterprise Manager 10g Grid Control Release 2, version 10.2.0.1 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Enterprise Manager 10g Grid Control Release 1, versions 10.1.0.3, 10.1.0.4 et 10.1.0.5 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Identity Management 10g, version 10.1.4.0.1 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Application Server 10g (9.0.4), versions 9.0.4.1, 9.0.4.2 et 9.0.4.3 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle9i Database Release 1, versions 9.0.1.4, 9.0.1.5 et 9.0.1.5 FIPS ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle E-Business Suite Release 11j, versions 11.5.7-11.5.10 CU2 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nPlusieurs vuln\u00e9rabilit\u00e9s pr\u00e9sentes dans les produits Oracle peuvent \u00eatre\nexploit\u00e9es par un utilisateur mal intentionn\u00e9 pour r\u00e9aliser un d\u00e9ni de\nservice, acc\u00e9der \u00e0 des donn\u00e9es ill\u00e9gitimement, ou ex\u00e9cuter du code\narbitraire sur le syst\u00e8me vuln\u00e9rable.\n\nOracle a publi\u00e9 51 correctifs diff\u00e9rents pour les diff\u00e9rentes\nvuln\u00e9rabilit\u00e9s de ses produits.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2007-02222",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-02222"
    }
  ],
  "initial_release_date": "2007-01-17T00:00:00",
  "last_revision_date": "2007-01-17T00:00:00",
  "links": [
    {
      "title": "Mises \u00e0 jour Oracle de janvier 2007 :",
      "url": "http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpujan2007.html"
    },
    {
      "title": "Alerte Symantec SYMSA-2007-001 du 16 janvier 2007 :",
      "url": "http://www.symantec.com/research"
    },
    {
      "title": "Page d\u0027alertes et de mises \u00e0 jour d\u0027Oracle :",
      "url": "http://www.oracle.com/technology/deploy/security/alerts.htm"
    }
  ],
  "reference": "CERTA-2007-AVI-032",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2007-01-17T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": null,
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Oracle",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Mises \u00e0 jour critiques Oracle du 16 janvier 2007",
      "url": null
    }
  ]
}