PT-2007-6551 · Oracle · Oracle E-Business Suite

Published 2007-10-17 · Updated 2012-10-23 · CVE-2007-5527

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite version 11.5.10.2

Description: The issue is related to multiple unspecified vulnerabilities in various components, including the Application Object Library component, Contracts Integration, Applications Manager, Marketing component, and Exchange component. These vulnerabilities have unknown impact and remote attack vectors.

Recommendations: For Oracle E-Business Suite version 11.5.10.2, consider restricting access to the affected components, including the Application Object Library, Contracts Integration, Applications Manager, Marketing, and Exchange components, until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2007-5527

Affected Products

Oracle E-Business Suite

References · 9

• http://marc.info/?l=bugtraq&m=119332677525918&w=2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-5527 · Security Note
• http://secunia.com/advisories/27251 · Vendor Advisory
• http://securitytracker.com/id?1018823 · Note
• http://us-cert.gov/cas/techalerts/TA07-290A.html · Note
• http://oracle.com/technetwork/topics/security/cpuoct2007-092913.html · Note
• http://vupen.com/english/advisories/2007/3524 · Note
• http://vupen.com/english/advisories/2007/3626 · Note
• http://secunia.com/advisories/27409 · Note