CVE-2008-1812 — Oracle Application Server vulnerability

4 documents4 sources
Severity
10.0CRITICALNVD
EPSS
0.9%
top 23.90%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Oracle Application ServerOracle Database 9I
Timeline
PublishedApr 16
Latest updateMay 1

Description

Unspecified vulnerability in the Oracle Enterprise Manager component in Oracle Database 9.0.1.5 FIPS+; Application Server 1.0.2.2; and Enterprise Manager for AS 1.0.2.2 and Database 9.0.1.5 has unknown impact and local attack vectors, aka EM01.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages2 packages

▶NVDoracle/database_9i9.0.1.5

🔴Vulnerability Details

2
GHSA
GHSA-r92g-hrvw-hhwv: Unspecified vulnerability in the Oracle Enterprise Manager component in Oracle Database 9↗2022-05-01
▶
CVEList
CVE-2008-1812: Unspecified vulnerability in the Oracle Enterprise Manager component in Oracle Database 9↗2008-04-16
▶

💥Exploits & PoCs

1
Exploit-DB
I-Pos Internet Pay Online Store 1.3 Beta - SQL Injection↗2008-06-01
▶
CVE-2008-1812 — Oracle Application Server vulnerability | cvebase