CVE-2007-0281 — Oracle Application Server vulnerability

3 documents3 sources
Severity
5.0MEDIUMNVD
EPSS
0.6%
top 29.51%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Oracle Application ServerOracle Collaboration SuiteOracle Http Server
Timeline
PublishedJan 17
Latest updateMay 1

Description

Multiple unspecified vulnerabilities in Oracle HTTP Server 9.0.1.5, 9.2.0.8, 10.1.0.5, and 10.2.0.3; Application Server 9.0.4.3, 10.1.2.0.0, 10.1.2.0.1, 10.1.2.0.2, 10.1.2.1, and 10.1.3.0; and Collaboration Suite 9.0.4.2 and 10.1.2; have unknown impact and attack vectors related to the Oracle HTTP Server, aka (1) OHS03 and (2) OHS04.

CVSS vector

AV:N/AC:L/C:N/I:P/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages3 packages

▶NVDoracle/http_server9.0.1.5
▶NVDoracle/application_server10.1.2.0.2, 10.1.2.2, 9.0.4.3+2
▶NVDoracle/collaboration_suite10.1.2, 9.0.4.2+1

Patches

Patch: secunia.com ↗Patch: www.us-cert.gov ↗Patch: secunia.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-p5cr-p9j3-gpgw: Multiple unspecified vulnerabilities in Oracle HTTP Server 9↗2022-05-01
▶
CVEList
CVE-2007-0281: Multiple unspecified vulnerabilities in Oracle HTTP Server 9↗2007-01-17
▶
CVE-2007-0281 — Oracle Application Server vulnerability | cvebase