FKIE_CVE-2008-7238

Vulnerability from fkie_nvd - Published: 2009-09-14 14:30 - Updated: 2026-06-16 23:03
Severity
Summary
Multiple unspecified vulnerabilities in Oracle E-Business Suite 12.0.3 allow (1) local users to affect confidentiality and integrity via unknown vectors related to the Mobile Application Server component (APP01); (2) remote attackers to affect confidentiality via unknown vectors related to the Oracle Applications Framework (APP03); remote authenticated users to affect confidentiality and integrity via unknown vectors related to the (3) CRM Technical Foundation (APP05) and (4) Oracle Application Object Library (APP06); and remote authenticated users to affect integrity and availability via unknown vectors related to (5) Oracle Applications Technology Stack (APP07).
References
cve@mitre.orghttp://marc.info/?l=bugtraq&m=120058413923005&w=2
cve@mitre.orghttp://secunia.com/advisories/28518Vendor Advisory
cve@mitre.orghttp://secunia.com/advisories/28556Vendor Advisory
cve@mitre.orghttp://securitytracker.com/id?1019218Patch
cve@mitre.orghttp://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html
cve@mitre.orghttp://www.osvdb.org/40284
cve@mitre.orghttp://www.osvdb.org/40286
cve@mitre.orghttp://www.osvdb.org/40288
cve@mitre.orghttp://www.osvdb.org/40289
cve@mitre.orghttp://www.osvdb.org/40290
cve@mitre.orghttp://www.securityfocus.com/bid/27229Exploit, Patch
cve@mitre.orghttp://www.us-cert.gov/cas/techalerts/TA08-017A.htmlPatch, US Government Resource
cve@mitre.orghttp://www.vupen.com/english/advisories/2008/0150Patch, Vendor Advisory
cve@mitre.orghttp://www.vupen.com/english/advisories/2008/0180Patch
af854a3a-2127-422b-91ae-364da2661108http://marc.info/?l=bugtraq&m=120058413923005&w=2
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/28518Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/28556Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://securitytracker.com/id?1019218Patch
af854a3a-2127-422b-91ae-364da2661108http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/40284
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/40286
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/40288
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/40289
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/40290
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/27229Exploit, Patch
af854a3a-2127-422b-91ae-364da2661108http://www.us-cert.gov/cas/techalerts/TA08-017A.htmlPatch, US Government Resource
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2008/0150Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2008/0180Patch
Impacted products
Vendor Product Version
oracle e-business_suite 12.0.3
To clipboard 

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:oracle:e-business_suite:12.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "1036B69E-013B-4492-B691-40BAC7C2F42A",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple unspecified vulnerabilities in Oracle E-Business Suite 12.0.3 allow (1) local users to affect confidentiality and integrity via unknown vectors related to the Mobile Application Server component (APP01); (2) remote attackers to affect confidentiality via unknown vectors related to the Oracle Applications Framework (APP03); remote authenticated users to affect confidentiality and integrity via unknown vectors related to the (3) CRM Technical Foundation (APP05) and (4) Oracle Application Object Library (APP06); and remote authenticated users to affect integrity and availability via unknown vectors related to (5) Oracle Applications Technology Stack (APP07)."
    },
    {
      "lang": "es",
      "value": "M\u00faltiples vulnerabilidades no especificada en Oracle E-Business Suite v12.0.3, permiten (1) a usuarios locales comprometer la confidencialidad e integridad a trav\u00e9s de vectores desconocidos relacionados con el componente Application SErver (APP01); (2) a atacantes remotos comprometer la confidencialidad a trav\u00e9s de vectores desconocidos relacionados con Oracle Applications Framework (APP03); usuarios autenticados en remoto comprometer la confidencialidad e integridad a trav\u00e9s de vectores desconocidos relacionados con (3)CRM Technical Foundation (APP05) y (4) Oracle Application Object Library (APP06); y a usuarios autenticados en remoto comprometer la integridad y disponibilidad a trav\u00e9s de vectores desconocidos relacionados con (5) Oracle Applications Technology Stack (APP07)."
    }
  ],
  "id": "CVE-2008-7238",
  "lastModified": "2026-06-16T23:03:53.640",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "SINGLE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 6.0,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 6.8,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2009-09-14T14:30:00.657",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://marc.info/?l=bugtraq\u0026m=120058413923005\u0026w=2"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/28518"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/28556"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "http://securitytracker.com/id?1019218"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/40284"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/40286"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/40288"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/40289"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/40290"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit",
        "Patch"
      ],
      "url": "http://www.securityfocus.com/bid/27229"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "US Government Resource"
      ],
      "url": "http://www.us-cert.gov/cas/techalerts/TA08-017A.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2008/0150"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "http://www.vupen.com/english/advisories/2008/0180"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://marc.info/?l=bugtraq\u0026m=120058413923005\u0026w=2"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/28518"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/28556"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://securitytracker.com/id?1019218"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/40284"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/40286"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/40288"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/40289"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/40290"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Patch"
      ],
      "url": "http://www.securityfocus.com/bid/27229"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "US Government Resource"
      ],
      "url": "http://www.us-cert.gov/cas/techalerts/TA08-017A.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2008/0150"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://www.vupen.com/english/advisories/2008/0180"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.