Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2008-1814

Unspecified vulnerability in the Oracle Secure Enterprise Search or Ultrasearch component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3; Application Server 9.0.4.3 and 10.1.2.2; and Oracle Collaboration Suite 10.1.2; has unknown impact and remote attack vectors, aka DB04.

Security Impact Summary

CVE-2008-1814 is a security vulnerability that . Impacting 3 products from oracle, from oracle, from oracle organizations running these solutions should prioritize assessment and patching.

Historical Context

Originally identified in 2008, this vulnerability predates many modern security frameworks and practices. The vulnerability landscape of that era was characterized by different threat models and less mature defense mechanisms compared to contemporary standards.

Published

2008-04-16T10:05:00.000

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 9.0 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Access Vector: NETWORK
Access Complexity: LOW
Authentication: SINGLE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

8.0

Impact Score

10.0

Weaknesses

Type: Primary
NVD-CWE-noinfo

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	oracle	application_server	9.0.4.3	Yes
Application	oracle	application_server	10.1.2.2	Yes
Application	oracle	collaboration_suite	10.1.2	Yes
Application	oracle	database	9.0.1.5	Yes
Application	oracle	database	9.2.0.8	Yes
Application	oracle	database	9.2.0.8dv	Yes
Application	oracle	database	10.1.0.5	Yes
Application	oracle	database	10.2.0.3	Yes

References

http://secunia.com/advisories/29829 Third Party Advisory ([email protected])
http://secunia.com/advisories/29874 Third Party Advisory ([email protected])
http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html Broken Link ([email protected])
http://www.securityfocus.com/archive/1/491024/100/0/threaded Third Party Advisory, VDB Entry ([email protected])
http://www.securitytracker.com/id?1019855 Third Party Advisory, VDB Entry ([email protected])
http://www.vupen.com/english/advisories/2008/1233/references Third Party Advisory ([email protected])
http://www.vupen.com/english/advisories/2008/1267/references Third Party Advisory ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/41858 Third Party Advisory, VDB Entry ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/41997 Third Party Advisory, VDB Entry ([email protected])
http://secunia.com/advisories/29829 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/29874 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/491024/100/0/threaded Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id?1019855 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2008/1233/references Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2008/1267/references Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/41858 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/41997 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For oracle's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.