CVE Feed

    Dashboard / CVE / CVE-2008-7238

    CVE-2008-7238

    Multiple unspecified vulnerabilities in Oracle E-Business Suite 12.0.3 allow (1) local users to affect confidentiality and integrity via unknown vectors related to the Mobile Application Server component (APP01); (2) remote attackers to affect confidentiality via unknown vectors related to the Oracle Applications Framework (APP03); remote authenticated users to affect confidentiality and integrity via unknown vectors related to the (3) CRM Technical Foundation (APP05) and (4) Oracle Application Object Library (APP06); and remote authenticated users to affect integrity and availability via unknown vectors related to (5) Oracle Applications Technology Stack (APP07).

    Published:Sep 14, 2009
    Last Modified:Apr 23, 2026
    EPS:Sep 14, 2009
    EPSS Score:0.02029
    CVSS Score:6

    Affected Products

    Vendor
    Oracle
    Product
    E-business Suite

    Exploits

    http://www.securityfocus.com/bid/27229http://www.securityfocus.com/bid/27229

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-70845 (CVSS 7.1) — Vulnerability in the Oracle Loans product of Oracle E-Business Suite (component: Internal Operations). Suppor…
    CVE-2026-70844 (CVSS 7.1) — Vulnerability in the Oracle Loans product of Oracle E-Business Suite (component: Internal Operations). Suppor…
    CVE-2026-70837 (CVSS 7.1) — Vulnerability in the Oracle Financials for Asia/Pacific product of Oracle E-Business Suite (component: Interna…
    CVE-2026-70815 (CVSS 8.1) — Vulnerability in the Oracle Internet Procurement Connector product of Oracle E-Business Suite (component: Inte…
    CVE-2026-70814 (CVSS 8.1) — Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Ope…
    CVE-2026-70813 (CVSS 8.8) — Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Ope…
    CVE-2026-70812 (CVSS 8.8) — Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Ope…
    CVE-2026-70807 (CVSS 8.5) — Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Ope…
    CVE-2026-70778 (CVSS 8.7) — Vulnerability in the Oracle Customer Care product of Oracle E-Business Suite (component: Internal Operations).…
    CVE-2026-70763 (CVSS 7.5) — Vulnerability in the Oracle Operations Intelligence product of Oracle E-Business Suite (component: Daily Busin…

    References

    http://marc.info/?l=bugtraq&m=120058413923005&w=2
    http://secunia.com/advisories/28518
    http://secunia.com/advisories/28556
    http://securitytracker.com/id?1019218
    http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html
    http://www.osvdb.org/40284
    http://www.osvdb.org/40286
    http://www.osvdb.org/40288
    http://www.osvdb.org/40289
    http://www.osvdb.org/40290
    http://www.securityfocus.com/bid/27229
    http://www.us-cert.gov/cas/techalerts/TA08-017A.html
    http://www.vupen.com/english/advisories/2008/0150
    http://www.vupen.com/english/advisories/2008/0180
    http://marc.info/?l=bugtraq&m=120058413923005&w=2
    http://secunia.com/advisories/28518
    http://secunia.com/advisories/28556
    http://securitytracker.com/id?1019218
    http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html
    http://www.osvdb.org/40284
    http://www.osvdb.org/40286
    http://www.osvdb.org/40288
    http://www.osvdb.org/40289
    http://www.osvdb.org/40290
    http://www.securityfocus.com/bid/27229
    http://www.us-cert.gov/cas/techalerts/TA08-017A.html
    http://www.vupen.com/english/advisories/2008/0150
    http://www.vupen.com/english/advisories/2008/0180

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High