CVE-2007-2130 — Oracle Application Server vulnerability

3 documents3 sources
Severity
9.0CRITICALNVD
EPSS
1.9%
top 16.60%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Oracle Application ServerOracle Collaboration SuiteOracle Database Server
Timeline
PublishedApr 18
Latest updateMay 1

Description

Unspecified vulnerability in Workflow Cartridge, as used in Oracle Database Server 9.2.0.1, 10.1.0.2, and 10.2.0.1; Application Server 9.0.4.3 and 10.1.2.0.2; Collaboration Suite 10.1.2; and E-Business Suite; has unknown impact and remote authenticated attack vectors, aka OWF01.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 8.0 | Impact: 10.0

Affected Packages3 packages

▶NVDoracle/database_server10.1.0.2, 10.2.0.1, 9.2.0.1+2
▶NVDoracle/application_server10.1.2.0.2, 9.0.4.3+1

🔴Vulnerability Details

2
GHSA
GHSA-wf94-c37g-7c29: Unspecified vulnerability in Workflow Cartridge, as used in Oracle Database Server 9↗2022-05-01
▶
CVEList
CVE-2007-2130: Unspecified vulnerability in Workflow Cartridge, as used in Oracle Database Server 9↗2007-04-18
▶
CVE-2007-2130 — Oracle Application Server vulnerability | cvebase