What’s Vulnerable › Vulnerabilities

CVE-2008-7238

• Severity: medium (CVSS 6.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2009-09-14 · updated 2026-06-16

Description

Multiple unspecified vulnerabilities in Oracle E-Business Suite 12.0.3 allow (1) local users to affect confidentiality and integrity via unknown vectors related to the Mobile Application Server component (APP01); (2) remote attackers to affect confidentiality via unknown vectors related to the Oracle Applications Framework (APP03); remote authenticated users to affect confidentiality and integrity via unknown vectors related to the (3) CRM Technical Foundation (APP05) and (4) Oracle Application Object Library (APP06); and remote authenticated users to affect integrity and availability via unknown vectors related to (5) Oracle Applications Technology Stack (APP07).

Affected products

• Oracle E-Business Suite: 12.0.3

References

• http://marc.info/?l=bugtraq&m=120058413923005&w=2
• http://secunia.com/advisories/28518
• http://secunia.com/advisories/28556
• http://securitytracker.com/id?1019218
• http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html
• http://www.osvdb.org/40284
• http://www.osvdb.org/40286
• http://www.osvdb.org/40288
• http://www.osvdb.org/40289
• http://www.osvdb.org/40290
• http://www.securityfocus.com/bid/27229
• http://www.us-cert.gov/cas/techalerts/TA08-017A.html

Get alerted when CVE-2008-7238 or the next vulnerability affects your stack