Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2008-0347

Unspecified vulnerability in the Oracle Ultra Search component in Oracle Collaboration Suite 10.1.2; Database 9.2.0.8, 10.1.0.5, and 10.2.0.3; and Application Server 9.0.4.3 and 10.1.2.0.2; has unknown impact and local attack vectors, aka OCS01. NOTE: Oracle has not disputed a reliable claim that this issue is related to WKSYS schema privileges.

Published

2008-01-17T23:00:00.000

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 10.0 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

10.0

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application oracle application_server 1.0.2.2 Yes
Application oracle application_server 9.0.4.3 Yes
Application oracle application_server 10.1.2.0.2 Yes
Application oracle application_server 10.1.2.1.0 Yes
Application oracle application_server 10.1.2.2.0 Yes
Application oracle application_server 10.1.3.0.0 Yes
Application oracle application_server 10.1.3.1.0 Yes
Application oracle application_server 10.1.3.3.0 Yes
Application oracle application_server_9i 9.0.4.3 Yes
Application oracle application_server_9i 10.1.2.0.2 Yes
Application oracle collaboration_suite 10.1.2 Yes
Application oracle database_server 9.0.1.5 Yes
Application oracle database_server 9.2.0.8 Yes
Application oracle database_server 9.2.0.8dv Yes
Application oracle database_server 10.1.0.5 Yes
Application oracle database_server 10.2.0.2 Yes
Application oracle database_server 10.2.0.3 Yes
Application oracle database_server 11.1.0.6 Yes
Application oracle e-business_suite 11.5.9 Yes
Application oracle e-business_suite 11.5.10 Yes
Application oracle e-business_suite 11.5.10.2 Yes
Application oracle e-business_suite 12.0.0 Yes
Application oracle e-business_suite 12.0.1 Yes
Application oracle e-business_suite 12.0.2 Yes
Application oracle e-business_suite 12.0.3 Yes
Application oracle peoplesoft_enterprise_peopletools 8.47 Yes
Application oracle peoplesoft_enterprise_peopletools 8.48 Yes
Application oracle peoplesoft_enterprise_peopletools 8.49 Yes
References