CVE-2008-7234

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-09-14 · updated 2026-06-16

Description

Unspecified vulnerability in the Oracle BPEL Worklist Application component in Oracle Application Server 10.1.2.2 and 10.1.3.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, aka AS03.

Affected products

Oracle Application Server: 10.1.2.2, 10.1.3.3

References

http://marc.info/?l=bugtraq&m=120058413923005&w=2
http://secunia.com/advisories/28518
http://secunia.com/advisories/28556
http://securitytracker.com/id?1019218
http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html
http://www.osvdb.org/40295
http://www.securityfocus.com/bid/27229
http://www.us-cert.gov/cas/techalerts/TA08-017A.html
http://www.vupen.com/english/advisories/2008/0150
http://www.vupen.com/english/advisories/2008/0180
http://marc.info/?l=bugtraq&m=120058413923005&w=2
http://secunia.com/advisories/28518

Get alerted when CVE-2008-7234 or the next vulnerability affects your stack