CVE-2008-0346

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-01-17 · updated 2026-06-16

Description

Unspecified vulnerability in the Oracle Jinitiator component in Oracle Application Server 1.3.1.27 and E-Business Suite 11.5.10.2 has unknown impact and remote attack vectors, aka AS01.

Affected products

Oracle Application Server: 1.0.2.2, 9.0.4.3, 10.1.2.0.2, 10.1.2.1.0, 10.1.2.2.0, 10.1.3.0.0 (+2)
Oracle Collaboration Suite: 10.1.2
Oracle Database: 9.0.1.5, 9.2.0.8, 9.2.0.8dv, 10.1.0.5, 10.2.0.2, 10.2.0.3 (+1)
Oracle E-Business Suite: 11.5.9, 11.5.10, 11.5.10.2, 12.0.0, 12.0.1, 12.0.2 (+1)
Oracle Corporation PeopleSoft Enterprise PT PeopleTools: 8.47, 8.48, 8.49

References

http://marc.info/?l=bugtraq&m=120058413923005&w=2
http://osvdb.org/40294
http://secunia.com/advisories/28518
http://secunia.com/advisories/28556
http://securitytracker.com/id?1019218
http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html
http://www.securityfocus.com/bid/27229
http://www.us-cert.gov/cas/techalerts/TA08-017A.html
http://www.vupen.com/english/advisories/2008/0150
http://www.vupen.com/english/advisories/2008/0180
http://marc.info/?l=bugtraq&m=120058413923005&w=2
http://osvdb.org/40294

Get alerted when CVE-2008-0346 or the next vulnerability affects your stack