CVE-2008-7234

critical

Description

Unspecified vulnerability in the Oracle BPEL Worklist Application component in Oracle Application Server 10.1.2.2 and 10.1.3.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, aka AS03.

References

http://www.vupen.com/english/advisories/2008/0180

http://www.vupen.com/english/advisories/2008/0150

http://www.us-cert.gov/cas/techalerts/TA08-017A.html

http://securitytracker.com/id?1019218

http://secunia.com/advisories/28556

http://secunia.com/advisories/28518

http://marc.info/?l=bugtraq&m=120058413923005&w=2

Details

Source: Mitre, NVD

Published: 2009-09-14

Updated: 2021-07-28

Risk Information

CVSS v2

Base Score: 6.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical