CVE-2008-7238

Summary

Multiple unspecified vulnerabilities in Oracle E-Business Suite 12.0.3 allow (1) local users to affect confidentiality and integrity via unknown vectors related to the Mobile Application Server component (APP01); (2) remote attackers to affect confidentiality via unknown vectors related to the Oracle Applications Framework (APP03); remote authenticated users to affect confidentiality and integrity via unknown vectors related to the (3) CRM Technical Foundation (APP05) and (4) Oracle Application Object Library (APP06); and remote authenticated users to affect integrity and availability via unknown vectors related to (5) Oracle Applications Technology Stack (APP07).

Impact & exploitability

AV:N/AC:M/Au:S/C:P/I:P/A:P

Affected products we track (1)

Recommendation

Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.

Official patch: http://securitytracker.com/id?1019218 ↗

Additional information

• NVD record
• http://securitytracker.com/id?1019218Patch
• http://secunia.com/advisories/28518Advisory
• http://secunia.com/advisories/28556Advisory
• http://marc.info/?l=bugtraq&m=120058413923005&w=2
• http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html
• http://www.osvdb.org/40284
• http://www.osvdb.org/40286
• http://www.osvdb.org/40288