CVE-2008-0347

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-01-17 · updated 2026-06-16

Description

Unspecified vulnerability in the Oracle Ultra Search component in Oracle Collaboration Suite 10.1.2; Database 9.2.0.8, 10.1.0.5, and 10.2.0.3; and Application Server 9.0.4.3 and 10.1.2.0.2; has unknown impact and local attack vectors, aka OCS01. NOTE: Oracle has not disputed a reliable claim that this issue is related to WKSYS schema privileges.

Affected products

Oracle Application Server: 1.0.2.2, 9.0.4.3, 10.1.2.0.2, 10.1.2.1.0, 10.1.2.2.0, 10.1.3.0.0 (+2)
Oracle Application Server 9I: 9.0.4.3, 10.1.2.0.2
Oracle Collaboration Suite: 10.1.2
Oracle Database: 9.0.1.5, 9.2.0.8, 9.2.0.8dv, 10.1.0.5, 10.2.0.2, 10.2.0.3 (+1)
Oracle E-Business Suite: 11.5.9, 11.5.10, 11.5.10.2, 12.0.0, 12.0.1, 12.0.2 (+1)
Oracle Corporation PeopleSoft Enterprise PT PeopleTools: 8.47, 8.48, 8.49

References

Get alerted when CVE-2008-0347 or the next vulnerability affects your stack