CVE-2007-0289

Multiple unspecified vulnerabilities in Oracle Collaboration Suite 9.0.4.2 have unknown impact and attack vectors related to Oracle Containers for J2EE, aka (1) OC4J01, (2) OC4J05, and (3) OC4J06.

CVSS v2.0 6.4 MEDIUM

6.4^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability : 10.0 / Impact : 4.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://osvdb.org/32895
http://osvdb.org/32899
http://osvdb.org/32900
http://secunia.com/advisories/23794	Patch Vendor Advisory
http://securitytracker.com/id?1017522
http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html
http://www.securityfocus.com/bid/22083
http://www.us-cert.gov/cas/techalerts/TA07-017A.html	Patch US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/31541

Configurations

Configuration 1 (hide)

cpe:2.3:a:oracle:application_server:9.0.4.2:*:*:*:*:*:*:*

History

No history.

Information

Published : 2007-01-17 02:28

Updated : 2017-07-29 01:30

NVD link : CVE-2007-0289

Mitre link : CVE-2007-0289

CVE.ORG link : CVE-2007-0289

JSON object : View

Products Affected

oracle

application_server

CWE

NVD-CWE-Other

{"id": "CVE-2007-0289", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.4, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 4.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2007-01-17T02:28:00.000", "references": [{"url": "http://osvdb.org/32895", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/32899", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/32900", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/23794", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://securitytracker.com/id?1017522", "source": "cve@mitre.org"}, {"url": "http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/22083", "source": "cve@mitre.org"}, {"url": "http://www.us-cert.gov/cas/techalerts/TA07-017A.html", "tags": ["Patch", "US Government Resource"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31541", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Multiple unspecified vulnerabilities in Oracle Collaboration Suite 9.0.4.2 have unknown impact and attack vectors related to Oracle Containers for J2EE, aka (1) OC4J01, (2) OC4J05, and (3) OC4J06."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades no especificadas en Collaboration Suite 9.0.4.2 tienen impacto y vectores de ataque desconocidos relacionados con Contenedores de Oracle para J2EE, tambi\u00e9n conocido como (1) OC4J01, (2) OC4J05, y (3) OC4J06."}], "lastModified": "2017-07-29T01:30:06.250", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:oracle:application_server:9.0.4.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D809B0B7-70EF-47C5-B91F-923E999CA7FB"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}