CVE-2008-2609

3 documents3 sources

Severity

6.4MEDIUM

EPSS

0.5%

top 35.45%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Oracle Application Server Oracle Oracle Application Server

Timeline

PublishedJul 15

Latest updateMay 1

Description

Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3, 10.1.2.3, and 10.1.4.2 has unknown impact and remote attack vectors.

CVSS vector

AV:N/AC:L/C:P/I:P/A:NExploitability: 10.0 | Impact: 4.9

Affected Packages2 packages

▶NVDoracle/application_server9.0.4.3

▶NVDoracle/oracle_application_server10.1.2.3, 10.1.4.2+1

🔴Vulnerability Details

GHSA

GHSA-3wvv-6gj7-cmfj: Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9↗2022-05-01

▶

CVEList

CVE-2008-2609: Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9↗2008-07-15

▶