CVE-2009-1017

3 documents3 sources
Severity
4.0MEDIUM
EPSS
3.4%
top 12.67%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Oracle Application Server
Timeline
PublishedApr 15
Latest updateMay 2

Description

Unspecified vulnerability in the BI Publisher component in Oracle Application Server 5.6.2, 10.1.3.2.1, 10.1.3.3.3, and 10.1.3.4 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2009-0994.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 8.0 | Impact: 2.9

Affected Packages1 packages

▶NVDoracle/application_server4 versions+3

🔴Vulnerability Details

2
GHSA
GHSA-m9rv-9vx3-wj7v: Unspecified vulnerability in the BI Publisher component in Oracle Application Server 5↗2022-05-02
▶
CVEList
CVE-2009-1017: Unspecified vulnerability in the BI Publisher component in Oracle Application Server 5↗2009-04-15
▶
CVE-2009-1017 (MEDIUM CVSS 4) | Unspecified vulnerability in the BI | cvebase.io